1. Scope and Purpose
This Data Processing Agreement applies to the processing of personal data and Protected Health Information (PHI) provided by the Customer to DevSamp in connection with software subscriptions and engineering services.
2. Customer as Data Fiduciary
The Customer maintains sole ownership and control of all patient and clinical data. DevSamp acts strictly as a Data Processor under documented instructions from the Customer.
3. Technical and Organizational Safeguards
DevSamp implements state-of-the-art technical measures including AES-256 encryption at rest, TLS 1.3 in transit, strict RBAC controls, and automated vulnerability audits.