Data Processing Agreement (DPA)

1. Scope and Roles

This Data Processing Agreement (DPA) supplements the Manna Manuscript Service Agreement. The Publisher/Customer acts as the Data Controller, and Manna Analytics Private Limited acts as the Data Processor.

The Processor shall process personal data solely on behalf of and under the documented instructions of the Controller.

2. Technical & Organizational Measures

Manna Analytics implements state-of-the-art technical measures including end-to-end TLS 1.3 encryption, AES-256 rest encryption, automated vulnerability scans, role-based access control, and comprehensive audit logs.

Personnel authorized to process personal data have committed to strict statutory and contractual confidentiality obligations.

3. Subprocessor Management

The Processor shall inform the Controller of any intended changes concerning the addition or replacement of subprocessors, providing the Controller the opportunity to object to such changes on reasonable data protection grounds.

4. Incident Notification & Audit Rights

In the event of a confirmed personal data breach affecting Customer data, Manna Analytics will notify the Controller without undue delay (and within 48 hours of becoming aware of the breach).

Manna Analytics makes available all information necessary to demonstrate compliance with GDPR Article 28.