Data Processing Agreement

1. Definitions

2. Scope and Purpose

This DPA applies where and to the extent that Langtrain processes personal data on behalf of the Customer in connection with the provision of the Langtrain platform, including:

• LLM fine-tuning and training job management
• Dataset storage and processing
• Model inference and API services
• RLHF annotation and feedback collection
• AI agent execution and workflow automation
• Analytics and monitoring (LangVision)

3. Customer Obligations (Controller)

The Customer, as Controller, agrees and warrants that:

• It has a lawful basis for processing personal data uploaded to Langtrain.
• It will not upload special category data (health, biometric, political opinions) without explicit consent and prior written notice to Langtrain.
• It will ensure data subjects have been informed about the processing.
• It is responsible for ensuring any instructions given to Langtrain comply with applicable law.
• It will notify Langtrain immediately of any data subject requests related to data processed on the platform.

4. Langtrain Obligations (Processor)

Langtrain agrees to:

• Process personal data only on documented instructions from the Customer.
• Ensure that personnel authorized to process personal data are bound by confidentiality.
• Implement appropriate technical and organizational security measures (encryption at rest and in transit, access controls, audit logs).
• Assist the Customer in responding to data subject requests within legally required timeframes.
• Notify the Customer without undue delay (and within 72 hours where feasible) upon becoming aware of a personal data breach.
• Delete or return all personal data upon termination of the service agreement, at the Customer's choice.
• Make available all information necessary to demonstrate compliance with this DPA.

6. International Data Transfers

Langtrain is headquartered in India and may process data in the United States and other regions via sub-processors. For transfers of personal data from the European Economic Area (EEA) or the UK, Langtrain relies on:

• Standard Contractual Clauses (SCCs) as approved by the European Commission.
• Adequacy decisions where applicable.
• UK International Data Transfer Agreements (IDTAs) for UK transfers.

7. Contact & DPA Execution

Enterprise customers requiring a signed, countersigned DPA for compliance purposes (e.g., GDPR, CCPA, HIPAA) should contact us at:

Langtrain AI Private Limited
Hyderabad, Telangana, India