Data Processing Addendum

5.1 Customer Responsibilities

The customer is responsible for:

• Having a lawful basis to process personal data
• Informing drivers and users about data collection
• Obtaining required consents where needed
• Ensuring uploaded documents are lawful
• Configuring access permissions correctly
• Reviewing AI-extracted data before use
• Verifying tolls, expenses, customs, and billing data
• Handling employment, transport, customs, tax, and regulatory obligations

5.2 NIMRYX.AI Responsibilities

NIMRYX.AI will process customer data only to provide the services, maintain security, provide support, improve platform reliability, and comply with legal obligations.

NIMRYX.AI will use reasonable security measures to protect customer data and restrict access to authorised personnel and service providers.

5.3 Subprocessors

NIMRYX.AI may use third-party service providers for hosting, database, maps, messaging, AI/OCR, email, analytics, support, and security.

A list of subprocessors should be maintained by NimryxAi Technologies and made available to customers upon request.

5.4 Data Return and Deletion

Upon contract termination, customer data may be exported, archived, deleted, or retained according to the customer agreement, technical limitations, and applicable legal requirements.