Data Processing Addendum (DPA)

This Data Processing Addendum ("DPA") forms part of the Terms of Service and Privacy Policy of Coverages Assigned Risk Rater. It applies where Coverages Assigned Risk Rater processes personal data subject to GDPR, UK GDPR, or CCPA/CPRA.

1. Roles of the Parties

• Customer acts as the Data Controller (or equivalent under applicable law).
• Coverages Assigned Risk Rater acts as the Data Processor, processing data only as instructed by the Customer.

2. Scope of Processing

• To generate commercial auto insurance quotes and premium calculations
• To maintain and improve the performance of the Service
• To provide support and security monitoring

3. Subprocessors

Coverages Assigned Risk Rater may engage trusted subprocessors (e.g., cloud hosting). A current list is available upon request. All subprocessors are bound by contracts ensuring data protection compliance.

4. Security Measures

We implement encryption, access controls, monitoring, and other industry-standard safeguards.

5. International Transfers

Where data is transferred outside the EEA/UK, Coverages Assigned Risk Rater uses appropriate safeguards (e.g., Standard Contractual Clauses).

6. Data Subject Rights

Coverages Assigned Risk Rater will assist Customer in responding to requests from data subjects exercising their GDPR/CCPA rights.

7. Termination & Deletion

Upon termination of the Service, Coverages Assigned Risk Rater will delete all personal data unless retention is required by law.

Contact for All Legal Inquiries

Email: hello@assignedriskrater.com