InstantGPU Data Processing Agreement (DPA)

Effective date: [September, 2026]
Last updated: [September, 2026]

Standard DPA structure shown below (roughly GDPR Art. 28-aligned). Confirm which transfer mechanism (SCCs, adequacy, other) applies to your actual data flows with counsel before publishing.

1. Scope & Roles

This DPA applies where Customer’s use of the Service involves InstantGPU processing personal data on Customer’s behalf. Customer is the “Controller” (or “Business”) and InstantGPU is the “Processor” (or “Service Provider”) with respect to such personal data.

2. Details of Processing

Category

Description

Nature & purpose Provision of GPU compute, serverless execution, and model API hosting as instructed by Customer
Duration Duration of the underlying service agreement, plus any applicable retention period
Types of personal data [Determined by Customer’s use — e.g., data contained in models, training data, or API payloads]
Categories of data subjects [Determined by Customer — e.g., Customer’s own end users]

3. Subprocessors

Customer authorizes InstantGPU to engage the subprocessors listed on our Subprocessors page. InstantGPU will provide notice of new subprocessors and an opportunity to object as described on that page.

4. Security Measures I

nstantGPU implements technical and organizational measures described in our Security & Shared Responsibility page, including [encryption in transit, access controls, isolation between customer workloads — confirm actual measures].

5. Data Subject Rights

InstantGPU will reasonably assist Customer in responding to data subject requests (access, deletion, portability) to the extent InstantGPU processes the relevant personal data on Customer’s behalf.

6. International Transfers

Where personal data is transferred outside [the EEA/UK/other relevant region], the transfer will be subject to [Standard Contractual Clauses / an applicable adequacy mechanism — confirm with counsel] as set out in Annex [X].

7. Breach Notification

InstantGPU will notify Customer without undue delay, and in any case within [72 hours], upon becoming aware of a personal data breach affecting Customer’s data.

8. Audit Rights

InstantGPU will make available information reasonably necessary to demonstrate compliance with this DPA, and permit audits [subject to reasonable notice and frequency limits — confirm approach].

9. Term

This DPA remains in effect for as long as InstantGPU processes personal data on Customer’s behalf under the underlying service agreement.

Contact

Qmoniqs Software Private Limited
C 2518, Sushant Lok 1, Sector 43, Gurgaon 122002 (Haryana), India
Email: [email protected]
Website: https://instantgpu.ai

Customer Workload Access

InstantGPU personnel do not access Customer workload content in the ordinary operation of the Services. Customer workload content is not used by InstantGPU to train foundation models or general-purpose AI models.