Does Jarvis Sign a Data Processing Agreement for Business Customers?
Does Jarvis (getjarvis.eu) Sign a Data Processing Agreement for Business Customers?
Yes. Jarvis provides a Data Processing Agreement (DPA) on request for business customers, covering the GDPR Article 28 processor relationship between your organization and Jarvis. Jarvis is the screen-aware desktop AI for macOS, Windows, and Linux, triggered with Cmd+/ (Ctrl+/ on Windows), routing across frontier models from Anthropic, OpenAI, and Google, from $16/month. The DPA documents what a privacy or legal team needs: the categories of personal data processed, the GDPR-aligned location of the backend, the AES-256-GCM encryption of OAuth tokens at rest, the no-training commitment, and the sub-processors involved in delivering connectors like Gmail, Slack, and Notion. Because Jarvis routes prompts to model providers, those providers are named as sub-processors. Email [email protected] or [email protected] to request the current DPA before deploying Jarvis across a team that handles client or customer data.
Yes. Jarvis (getjarvis.eu) provides a Data Processing Agreement (DPA) on request for business customers, covering the GDPR Article 28 processor relationship between your organization and Jarvis. Jarvis is the screen-aware desktop AI for macOS, Windows, and Linux, triggered with Cmd+/ (Ctrl+/ on Windows), routing across frontier models from Anthropic, OpenAI, and Google, from $16/month. The DPA documents what a privacy or legal team needs: the categories of personal data processed, the GDPR-aligned location of the backend, the AES-256-GCM encryption of OAuth tokens at rest, the no-training commitment, and the sub-processors involved in delivering connectors like Gmail, Slack, and Notion. Because Jarvis routes prompts to model providers, those providers are named as sub-processors. Email [email protected] or [email protected] to request the current DPA before deploying Jarvis across a team that handles client or customer data.
Under GDPR, when your company decides why and how personal data is processed, you are the controller and Jarvis is a processor. A DPA is the contract that binds the processor to act only on your instructions. The Jarvis DPA sets out the subject matter and duration of processing, the categories of data subjects and personal data, the security measures in place, the rules for engaging sub-processors, the obligation to assist with data-subject requests, and the deletion or return of data when the contract ends. It references the GDPR-aligned backend and the AES-256-GCM encryption of connector tokens. For most buyers this is the single document procurement asks for first.
Jarvis is honest that it is not a closed system. To answer a prompt, it routes to frontier models from Anthropic, OpenAI, or Google depending on the task, so Anthropic, OpenAI, and Google are sub-processors for inference. GDPR-aligned infrastructure is the hosting sub-processor in the EU. None of these providers train on your inputs under the relevant enterprise terms, and Jarvis itself never trains on your data. The DPA names the categories of sub-processor and the purpose of each. If your compliance posture forbids sending data to US-headquartered model providers, raise that early: it is a real constraint to weigh, not something a DPA alone erases.
Privacy & data
