This Data Processing Addendum ("DPA") forms part of the agreement between the customer ("you", the Data Fiduciary/Controller) and Deephash Technologies Pvt. Ltd. ("Jagriq", the Data Processor) for your use of Jagriq. It governs our processing of personal data on your behalf under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable data-protection law.
Effective 2026-07-04. Last updated 2026-07-04.
An executable copy of this DPA is available on request at support@jagriq.com. This page is a summary of its terms; where you have a signed agreement with us, that agreement governs.
1. Roles
Where you use Jagriq to process personal data of your own clients and contacts, you are the Data Fiduciary (Controller) and Jagriq is the Data Processor, processing that data only on your documented instructions (which include your configuration and use of the service).
2. Scope and instructions
We process personal data only to provide and support the service, as described in our Privacy Policy and the agreement, and as you instruct. We will tell you if, in our opinion, an instruction infringes applicable law.
3. Confidentiality
We ensure that personnel authorised to process your data are bound by confidentiality and are trained on their obligations. Access is on a need-to-know basis and subject to ethical walls, including for our own staff.
4. Security
We implement appropriate technical and organisational measures — including encryption in transit and at rest, per-organisation isolation and access controls, and audit logging — as described in our Privacy Policy and summarised in Annex B.
5. Sub-processing
You authorise us to engage the sub-processors listed at /subprocessors. We impose data-protection obligations on each sub-processor no less protective than those in this DPA, and remain responsible for their performance. We will make the current list available and provide a means to learn of changes.
6. Assisting with data-principal requests
Taking into account the nature of the processing, we will assist you with appropriate measures to respond to requests from data principals to exercise their rights (access, correction, completion, erasure, nomination and grievance).
7. Personal-data breaches
We will notify you without undue delay after becoming aware of a personal-data breach affecting your data, and provide reasonable information to help you meet your notification obligations.
8. Return and deletion
On termination, or on your request, we will delete or return your personal data as set out in the agreement and our Privacy Policy, except where retention is required by law.
9. Audits
We will make available information reasonably necessary to demonstrate compliance with this DPA and, subject to confidentiality and reasonable notice, allow for audits consistent with the agreement.
10. International transfers
Where processing occurs outside India, we apply contractual safeguards providing a comparable level of protection, consistent with applicable law.
Annex A — Details of processing
- Subject matter & duration: provision of the Jagriq service for the term of the agreement.
- Nature & purpose: hosting, processing and analysis of legal documents and matter data to deliver research, drafting, litigation management, document intelligence, communications and billing features.
- Categories of data principals: your personnel, clients, opposing parties and other individuals referenced in your matters.
- Categories of personal data: identity and contact details, professional details, matter and case content, communications, and any personal data you choose to include in your content.
Annex B — Security measures
Per-organisation isolation; ethical walls (including for our staff); encryption in transit and at rest with managed keys (dedicated keys available on Enterprise); access controls and immutable audit logging; India data residency; and a security programme designed around recognised standards, including the principles of ISO/IEC 27001.
Annex C — Sub-processors
As listed at /subprocessors.
This DPA is provided for transparency and should be reviewed with counsel; it does not itself create a signed agreement.