NextELN Help
← All guides

Data Processing Addendum (DPA)

Effective date: July 12, 2026. Summary of terms — a signable DPA is available on request at support@nexteln.com.

This DPA forms part of the Terms of Service where NextELN ("Processor") processes personal data on behalf of a Customer ("Controller") under the EU/UK GDPR and similar laws.

Roles & scope

  • Controller: the Customer. Processor: NextELN.
  • Subject matter: providing the electronic lab notebook and related Services.
  • Duration: for the term of the Agreement.
  • Nature & purpose: hosting, storage, processing, and display of Customer data to operate the Service, plus optional AI features the Customer enables.
  • Types of data: account identifiers (name, email, org), and whatever Content the Customer chooses to store. Categories of data subjects: the Customer's users and any individuals referenced in Content.

Processor obligations

  1. Process personal data only on the Controller's documented instructions (including this DPA and use of the Service).
  2. Ensure personnel are bound by confidentiality.
  3. Implement appropriate technical & organizational measures (GDPR Art. 32) — see Security.
  4. Engage sub-processors only under equivalent obligations; current list at Sub-processors; we give notice of changes and the Controller may object.
  5. Assist the Controller with data-subject requests and with Arts. 32–36 obligations, taking into account the nature of processing.
  6. Notify the Controller without undue delay on becoming aware of a personal-data breach.
  7. On termination, delete or return personal data at the Controller's choice, subject to legal retention. The Controller can self-export any time (Admin → Archive).
  8. Make available information to demonstrate compliance and allow audits (via reports/questionnaires or, where required, on-site by arrangement).

International transfers

Where personal data is transferred outside the EEA/UK, the parties rely on the Standard Contractual Clauses (and UK Addendum) or another valid transfer mechanism. Customers using bring-your-own database/storage control the region where their Content resides.

Executing the DPA

Need a countersigned DPA for procurement? Email support@nexteln.com and we'll provide the signable version.

Last updated 7/12/2026