This page summarizes our data processing practices for business customers. A full Data Processing Addendum (DPA) is available on request by contacting legal@primeaicorp.com.
Roles
For customer-provided training data, the customer is typically the data controller and Prime AI Company acts as a data processor, processing data only on documented instructions in the statement of work.
Subprocessors
We may use the following subprocessors to deliver services, depending on the engagement:
- Amazon Web Services: GPU compute and storage for training.
- Modal: serverless GPU compute for training and inference.
- Hugging Face: private model and dataset repositories, only when requested by the customer.
Where a customer requires training inside its own AWS account or Modal workspace, that account is operated under the customer's own agreement with the provider. We will notify customers of material subprocessor changes where contractually required.
Security measures
- Encryption in transit (TLS) for data transfer.
- Role-based access to training environments.
- Customer-VPC or isolated cloud accounts where contracted.
- Deletion or return of data per SOW after project completion.
Data subject requests
We assist controllers with reasonable requests to access, correct, or delete personal data in training sets, subject to technical constraints and legal holds.
Full DPA
Email legal@primeaicorp.com for a countersigned DPA.