Data Processing Agreement
Effective: February 12, 2026
Chaman Ventures, SAS au capital de 100 €
RCS Paris 989 498 902 — TVA FR92989498902
229 Rue Saint-Honoré, 75001 Paris, France
1. Roles
You (the Customer) are the data Controller. Chaman Ventures, SAS, registered at 229 Rue Saint-Honore, 75001 Paris, France (RCS Paris 989 498 902, TVA FR92989498902) acts as the data Processor. Where you connect third-party integrations, those providers act as sub-processors under this agreement.
2. Scope of processing
We process personal data solely to provide the ContractSpec Studio service: feedback ingestion, correlation, impact analysis, deliverable generation, work item export, and stakeholder notifications. Processing is performed on documented instructions from you.
3. Data residency
Primary database resides in the EU (eu-west-1) via Supabase. Analytics data is processed in the EU via PostHog. LLM inference may route through US-based providers; EU-only inference is available via Mistral AI. Enterprise plans support single-tenant or on-premises deployment for full data sovereignty.
Platform-level sub-processors
Active for all customers as part of normal operations.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Vercel | Hosting, serverless functions | HTTP requests, page views | Configurable |
| Supabase | Managed PostgreSQL database | All persistent application data | EU (eu-west-1) |
| PostHog | Product analytics, feature flags | User behavior events, feature flag evaluations | EU |
User-configurable sub-processors
Only active when explicitly connected by you through integrations settings.
| Provider | Purpose | Data processed when connected |
|---|---|---|
| Slack | Thread import, brief posting | Messages, thread content |
| GitHub | Codebase analysis, PR ingestion | Repository content, pull request data |
| Jira | Issue export | Work items, project data |