24:I[605500,["/_next/static/chunks/16vzwrgxdneps.js","/_next/static/chunks/33tewtylqj_5b.js","/_next/static/chunks/0yh4s14oodo_f.js","/_next/static/chunks/2tz0gxhvwxxub.js","/_next/static/chunks/42q5_ukskwesl.js","/_next/static/chunks/3esr3jvuqehgh.js","/_next/static/chunks/0srlvyxuw0y_6.js","/_next/static/chunks/3ddrdf6v7uu1n.js","/_next/static/chunks/31utpnhcbkxpr.js","/_next/static/chunks/0snsxfzdz3et9.js","/_next/static/chunks/2kary8xqw6rjk.js","/_next/static/chunks/3aqwdy6s10p-h.js","/_next/static/chunks/17szccov77p-c.js","/_next/static/chunks/06wlonmjxades.js","/_next/static/chunks/11zq5tgr3odpx.js","/_next/static/chunks/0dx6v_-51likk.js","/_next/static/chunks/3pxb171e0ipxi.js","/_next/static/chunks/2zriw_w0xx4ex.js"],"Image"] 25:I[453199,["/_next/static/chunks/16vzwrgxdneps.js","/_next/static/chunks/33tewtylqj_5b.js","/_next/static/chunks/0yh4s14oodo_f.js","/_next/static/chunks/2tz0gxhvwxxub.js","/_next/static/chunks/42q5_ukskwesl.js","/_next/static/chunks/3esr3jvuqehgh.js","/_next/static/chunks/0srlvyxuw0y_6.js","/_next/static/chunks/3ddrdf6v7uu1n.js","/_next/static/chunks/31utpnhcbkxpr.js","/_next/static/chunks/0snsxfzdz3et9.js","/_next/static/chunks/2kary8xqw6rjk.js","/_next/static/chunks/3aqwdy6s10p-h.js","/_next/static/chunks/17szccov77p-c.js","/_next/static/chunks/06wlonmjxades.js","/_next/static/chunks/11zq5tgr3odpx.js","/_next/static/chunks/0dx6v_-51likk.js","/_next/static/chunks/3pxb171e0ipxi.js","/_next/static/chunks/3ux7hsk-mpu0k.js","/_next/static/chunks/1ktqw7oiknv21.js","/_next/static/chunks/1wm-mz-4e2o00.js","/_next/static/chunks/3na1h9dgmiuc-.js","/_next/static/chunks/0wrk2giuurqzp.js","/_next/static/chunks/453ltvjdnu1ga.js"],"TurboLink"] 26:I[27201,["/_next/static/chunks/33t46atd3n2zd.js"],"IconMark"] 27:I[787496,["/_next/static/chunks/16vzwrgxdneps.js","/_next/static/chunks/33tewtylqj_5b.js","/_next/static/chunks/0yh4s14oodo_f.js","/_next/static/chunks/2tz0gxhvwxxub.js","/_next/static/chunks/42q5_ukskwesl.js","/_next/static/chunks/3esr3jvuqehgh.js","/_next/static/chunks/0srlvyxuw0y_6.js","/_next/static/chunks/3ddrdf6v7uu1n.js","/_next/static/chunks/31utpnhcbkxpr.js","/_next/static/chunks/0snsxfzdz3et9.js","/_next/static/chunks/2kary8xqw6rjk.js","/_next/static/chunks/3aqwdy6s10p-h.js","/_next/static/chunks/17szccov77p-c.js","/_next/static/chunks/06wlonmjxades.js","/_next/static/chunks/11zq5tgr3odpx.js","/_next/static/chunks/0dx6v_-51likk.js","/_next/static/chunks/3pxb171e0ipxi.js","/_next/static/chunks/3ux7hsk-mpu0k.js","/_next/static/chunks/1ktqw7oiknv21.js","/_next/static/chunks/1wm-mz-4e2o00.js","/_next/static/chunks/3na1h9dgmiuc-.js","/_next/static/chunks/0wrk2giuurqzp.js","/_next/static/chunks/453ltvjdnu1ga.js"],"I18nControls"] 28:I[304349,["/_next/static/chunks/16vzwrgxdneps.js","/_next/static/chunks/33tewtylqj_5b.js","/_next/static/chunks/0yh4s14oodo_f.js","/_next/static/chunks/2tz0gxhvwxxub.js","/_next/static/chunks/42q5_ukskwesl.js","/_next/static/chunks/3esr3jvuqehgh.js","/_next/static/chunks/0srlvyxuw0y_6.js","/_next/static/chunks/3ddrdf6v7uu1n.js","/_next/static/chunks/31utpnhcbkxpr.js","/_next/static/chunks/0snsxfzdz3et9.js","/_next/static/chunks/2kary8xqw6rjk.js","/_next/static/chunks/3aqwdy6s10p-h.js","/_next/static/chunks/17szccov77p-c.js","/_next/static/chunks/06wlonmjxades.js","/_next/static/chunks/11zq5tgr3odpx.js","/_next/static/chunks/0dx6v_-51likk.js","/_next/static/chunks/3pxb171e0ipxi.js","/_next/static/chunks/3ux7hsk-mpu0k.js","/_next/static/chunks/1ktqw7oiknv21.js","/_next/static/chunks/1wm-mz-4e2o00.js","/_next/static/chunks/3na1h9dgmiuc-.js","/_next/static/chunks/0wrk2giuurqzp.js","/_next/static/chunks/453ltvjdnu1ga.js"],"FooterNavigation"] 23:T24eb,

Last updated: 2026-09-20

This Data Processing Addendum ("DPA") forms part of the Terms of Service between you ("Customer", "Controller") and Cognitivers LLC, a limited liability company formed under the laws of [STATE], United States, registered address [REGISTERED ADDRESS] ("Cognitivers", "Processor"). It applies whenever, in your use of the Service, you send us personal data that we process on your behalf. Where we act as controller (your account, your billing, website analytics), the Privacy Policy applies instead.

If you need a countersigned copy, follow [DPA SIGNATURE PROCESS].

1. Roles and subject matter

1.1. For personal data contained in your Inputs and the resulting Outputs, you are the controller (or a processor acting for your own customer) and we are your processor. If you are a processor, you confirm you have your controller's authority to appoint us as a subprocessor.

1.2. We process that personal data only to provide the Service under the Terms and on your documented instructions, which are the Terms, this DPA and your configuration of the Service (in particular the retention setting of each API key). Sending a request is an instruction to process it and return an Output.

1.3. We will tell you if we believe an instruction breaches the GDPR or other data protection law, and we may pause the affected processing.

2. Nature of the processing

Subject matter: providing model inference, chat and embeddings over the API.
Duration: the term of the Terms, plus the retention period you set.
Nature and purpose: receiving Inputs, running them through a Model, returning Outputs, and storing them according to the key's retention setting.
Types of personal data: whatever you choose to include in Inputs. You control this. We ask you not to send special-category data unless you have a lawful basis and have told us.
Categories of data subjects: whoever you choose to write about in your Inputs (for example your own users, employees or research subjects).

3. Our obligations

We will:

process personal data only on your instructions (section 1);
ensure that staff authorised to process it are bound by confidentiality;
implement the technical and organisational security measures in Annex 2 (Art. 32 GDPR);
respect the conditions in section 4 for engaging subprocessors;
assist you, taking account of the nature of the processing, to respond to data subject requests (Arts. 12 to 23), and to meet your obligations under Arts. 32 to 36 (security, breach notice, impact assessments and prior consultation);
at your choice, delete or return the personal data at the end of the Service and delete existing copies, unless the law requires us to keep it;
make available the information needed to show compliance and allow for audits under section 6.

4. Subprocessors

4.1. You give general authorisation for us to engage subprocessors. The current list is on the Subprocessors page.

4.2. We will impose data protection obligations on each subprocessor that are no less protective than this DPA, and we remain liable to you for their performance.

4.3. We will give at least 30 days' notice before adding or replacing a subprocessor by updating the Subprocessors page and, if you have subscribed to notifications, by email. You may object on reasonable data protection grounds within that period. If we cannot resolve your objection, you may stop sending the affected personal data and, if that makes the Service unusable for you, terminate the affected part and receive a refund of unused Credits.

5. International transfers and the Standard Contractual Clauses

5.1. Inference and storage take place in the European Union. However, Cognitivers LLC is established in the United States, and our access to the data from the US is a transfer under Chapter V of the GDPR.

5.2. For that transfer, the Standard Contractual Clauses adopted by the European Commission in Decision (EU) 2021/914 are incorporated into this DPA by reference and take precedence over the rest of the DPA in case of conflict:

Module Two (controller to processor) applies where you are a controller; Module Three (processor to processor) applies where you are a processor. [Counsel to confirm module selection and complete the docking clauses.]
Clause 7 (docking) applies. Clause 9: option 2 (general written authorisation), with the 30-day notice in section 4.3. Clause 11: the independent dispute resolution option is not selected. Clause 17: the Clauses are governed by the law of [an EU Member State to be confirmed, for example Ireland or Spain]. Clause 18: the forum is the courts of that Member State.
Annex I (parties, description of transfer, competent supervisory authority), Annex II (security measures) and Annex III (subprocessors) are completed by Annex 1 and Annex 2 of this DPA and by the Subprocessors page.

5.3. For onward transfers to subprocessors established outside the EU (for example Cloudflare, Stripe and our US-based monitoring or analytics providers), each is either certified under the EU-US Data Privacy Framework or bound by the Standard Contractual Clauses. The mechanism for each is shown on the Subprocessors page.

5.4. Where Cognitivers LLC is certified under the EU-US Data Privacy Framework, transfers to it are additionally covered by the Commission's adequacy decision of 10 July 2023. The Clauses remain in place as a fallback. [CONFIRM certification status.]

5.5. We will carry out and share, on request, a transfer impact assessment, and we will challenge any government access request that is unlawful or excessive, and tell you where we are legally permitted.

6. Audit

6.1. On reasonable request, no more than once a year unless a supervisory authority or a breach requires otherwise, we will provide the information reasonably needed to demonstrate compliance with this DPA, including our most recent security documentation and any third-party audit reports we hold.

6.2. If that is not enough for your regulator, you or an independent auditor bound by confidentiality may audit our relevant systems, at your cost, on 30 days' notice, at a time that does not disrupt the Service and without accessing other customers' data.

7. Breach notification

We will notify you without undue delay, and in any case within 72 hours of becoming aware, of a personal data breach affecting personal data we process for you. The notice will describe the nature of the breach, the likely consequences and the measures taken or proposed. We will help you meet your own notification duties to authorities and data subjects.

8. Deletion and return

On termination, or on your written request, we will delete or return the personal data we process for you and delete existing copies within 30 days, except where the law requires retention, in which case we will keep it only for that purpose and keep protecting it.

9. Liability

Each party's liability under this DPA is subject to the limitation of liability in the Terms. Nothing in this DPA limits a data subject's rights or the liability regime under Art. 82 GDPR and the Standard Contractual Clauses.

10. Order of precedence

In case of conflict: the Standard Contractual Clauses first, then this DPA, then the Terms.

Annex 1: description of the processing

Completed by sections 1 and 2 above and by the account configuration. Competent EU supervisory authority: the authority of the EU Member State where the EU representative ([EU REPRESENTATIVE]) is located, or, where Module Two/Three Annex I.C requires, the authority determined under Clause 13.

Annex 2: technical and organisational security measures (Art. 32)

Encryption of personal data in transit (TLS 1.2 or higher) and at rest.
Inference on GPU servers in the EU reachable only over a private network, not exposed to the public internet.
API keys stored hashed; no plaintext key storage.
Access to production limited to named staff, with multi-factor authentication, least privilege and access logging.
Separation of customer data by account and by key; retention enforced per key.
Regular patching, backups and monitoring; alerting on abuse and anomaly signals.
Documented incident response and breach notification process.
Staff confidentiality undertakings and security training.
Subprocessor due diligence and contractual data protection terms.

[Counsel and engineering to confirm each measure against the deployed configuration before this DPA is relied on.]

Annex 3: subprocessors

The list on the Subprocessors page forms Annex III to the Standard Contractual Clauses.

b:["$","section",null,{"className":"relative w-full","children":["$","div",null,{"className":"mx-auto flex w-full flex-col px-6 py-16 sm:px-10 md:py-24 gap-10 sm:gap-12 lg:gap-16","children":[["$","header",null,{"children":[["$","div",null,{"className":"border-hairline bg-canvas/60 inline-flex h-7 max-w-full items-center gap-2.5 overflow-hidden rounded-full border pr-3.5 pl-3 font-mono text-[11px] leading-none tracking-[0.12em] uppercase","children":[["$","span",null,{"aria-hidden":true,"className":"bg-ow-accent size-1.5 shrink-0 rounded-full"}],null,["$","span",null,{"className":"text-ink truncate font-medium","children":"Legal"}]]}],["$","h1",null,{"children":"Data Processing Addendum","className":"text-ink text-3xl font-medium tracking-tighter text-balance md:text-4xl lg:text-6xl"}],["$","p",null,{"children":"The terms under which Cognitivers LLC processes personal data on your behalf when you send it through the API. Includes the Standard Contractual Clauses, our security measures, subprocessors, breach notice and audit rights.","className":"text-ink-muted text-balance md:text-lg"}]],"className":"flex flex-col gap-4 items-center text-center"}],["$","div",null,{"className":"typeset typeset-prose w-full max-w-[65ch] min-w-0 pb-6","dangerouslySetInnerHTML":{"__html":"$23"}}]]}]}] 1e:["$","main",null,{"className":"bg-canvas relative flex flex-1 flex-col items-center justify-center overflow-hidden px-6 py-24","children":[["$","$L24",null,{"src":"/images/brand/tex-orb.webp","alt":"","width":1200,"height":896,"className":"pointer-events-none absolute top-1/2 left-1/2 w-[48rem] max-w-none -translate-x-1/2 -translate-y-1/2 [mask-image:radial-gradient(ellipse_50%_50%_at_50%_50%,black_20%,transparent_100%)] opacity-40"}],["$","div",null,{"className":"relative flex max-w-xl flex-col items-center gap-6 text-center","children":[["$","span",null,{"className":"text-ink-muted text-caption font-mono","children":"404"}],["$","h1",null,{"className":"text-ink text-[clamp(2rem,5vw,3.5rem)] leading-[1.02] font-medium tracking-[-0.04em] text-balance","children":"Not found!"}],["$","p",null,{"className":"text-ink-muted text-lead max-w-md text-pretty","children":"The resource you are looking for does not exist."}],["$","$L25",null,{"href":"/","className":"focus-visible:outline-solid focus-visible:outline-ink focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:aria-invalid:border-destructive/50 group/button inline-flex shrink-0 cursor-pointer touch-manipulation items-center justify-center gap-2 rounded-md bg-clip-padding text-sm font-medium whitespace-nowrap transition-all outline-none select-none focus-visible:ring-[3px] active:scale-[0.97] disabled:pointer-events-none disabled:opacity-50 aria-invalid:ring-[3px] [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-']):not([class*='w-']):not([class*='h-'])]:size-4 h-11 px-6 has-data-[icon=inline-end]:pr-4 has-data-[icon=inline-start]:pl-4 bg-ink text-canvas hover:bg-ink/90 rounded-pill","children":"Go back home"}]]}]]}] e:null 12:[["$","title","0",{"children":"Data Processing Addendum | Cognitivers"}],["$","meta","1",{"name":"description","content":"The terms under which Cognitivers LLC processes personal data on your behalf when you send it through the API. Includes the Standard Contractual Clauses, our security measures, subprocessors, breach notice and audit rights."}],["$","link","2",{"rel":"manifest","href":"/manifest.webmanifest","crossOrigin":"$undefined"}],["$","meta","3",{"property":"og:title","content":"Data Processing Addendum"}],["$","meta","4",{"property":"og:description","content":"The terms under which Cognitivers LLC processes personal data on your behalf when you send it through the API. Includes the Standard Contractual Clauses, our security measures, subprocessors, breach notice and audit rights."}],["$","meta","5",{"property":"og:url","content":"https://cognitivers.com"}],["$","meta","6",{"property":"og:site_name","content":"Cognitivers"}],["$","meta","7",{"property":"og:image","content":"https://cognitivers.com/images/og.jpg"}],["$","meta","8",{"property":"og:image:width","content":"1200"}],["$","meta","9",{"property":"og:image:height","content":"630"}],["$","meta","10",{"property":"og:image:alt","content":"Cognitivers"}],["$","meta","11",{"property":"og:type","content":"website"}],["$","meta","12",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","13",{"name":"twitter:title","content":"Data Processing Addendum"}],["$","meta","14",{"name":"twitter:description","content":"The terms under which Cognitivers LLC processes personal data on your behalf when you send it through the API. Includes the Standard Contractual Clauses, our security measures, subprocessors, breach notice and audit rights."}],["$","meta","15",{"name":"twitter:image","content":"https://cognitivers.com/images/og.jpg"}],["$","meta","16",{"name":"twitter:image:alt","content":"Cognitivers"}],["$","meta","17",{"name":"twitter:image:width","content":"1200"}],["$","meta","18",{"name":"twitter:image:height","content":"630"}],["$","link","19",{"rel":"icon","href":"/favicon.ico?favicon.36as9cjf1g_xo.ico","sizes":"32x32","type":"image/x-icon"}],["$","link","20",{"rel":"icon","href":"/icon.svg?icon.3hq66w4z7z21z.svg","sizes":"any","type":"image/svg+xml"}],["$","link","21",{"rel":"apple-touch-icon","href":"/apple-icon.png?apple-icon.2rei5i9lrk0dq.png","sizes":"180x180","type":"image/png"}],["$","$L26","22",{}]] 22:["$","footer",null,{"className":"relative isolate mt-auto w-full overflow-hidden","children":[["$","div",null,{"aria-hidden":true,"className":"from-ow-accent/24 via-ow-accent/7 pointer-events-none absolute inset-x-0 top-0 -z-1 h-80 bg-radial-[ellipse_50%_100%_at_50%_0%] via-45% to-transparent to-75%"}],["$","div",null,{"className":"divide-hairline grid grid-cols-1 divide-y md:grid-cols-4 md:divide-x md:divide-y-0","children":[["$","div",null,{"className":"flex flex-col items-start gap-4 p-8 lg:pt-18","children":[["$","$L25",null,{"href":"/","className":"text-ink flex shrink-0 items-center gap-2.5","aria-label":"Home","children":[["$","svg",null,{"viewBox":"0 0 64 64","fill":"none","aria-hidden":true,"className":"size-7","children":[["$","rect",null,{"x":"16","y":"40","width":"36","height":"13","rx":"6","fill":"currentColor"}],["$","rect",null,{"x":"10","y":"25","width":"36","height":"13","rx":"6","fill":"currentColor"}],["$","rect",null,{"x":"18","y":"10","width":"36","height":"13","rx":"6","className":"fill-ow-accent"}]]}],["$","span",null,{"className":"font-brand text-[1.45rem] leading-none font-extrabold tracking-[-0.04em] lowercase","children":"cognitivers"}]]}],["$","p",null,{"className":"text-small text-ink-muted max-w-xs text-pretty","children":"Open-weight inference without the refusal layer, served from GPUs in the EU. One endpoint, your logs."}],["$","div",null,{"className":"mt-1 flex items-center gap-3","children":["$","$L27",null,{}]}]]}],["$","$L28",null,{}]]}],["$","div",null,{"className":"border-hairline border-t py-4","children":["$","div",null,{"className":"flex flex-col items-center justify-between gap-2 px-8 sm:flex-row","children":[["$","p",null,{"className":"text-small text-ink-muted text-center","children":["© ",2026," ","Cognitivers","."," ","All rights reserved","."]}],"$L29"]}]}]]}]