Lattice Robotics LLC · DPA
Data Processing Addendum (EU data transfer)
Counterparty
Lattice Robotics LLC
Pages
12
Language
EN
Attachment
dpa.pdf
Up to date
Open full page
What to watch
High · 0 · Medium · 2 · Low · 0
Termination
Medium
«§9.1»p.9
Termination requires the notice period and conditions set out in this clause.
What it affects. It affects how the agreement can be exited and how far ahead action is needed to do so.
Liability cap
Medium
«§11.1»p.11
Liability is capped; the cap amount and its exclusions are set out in this clause.
What it affects. It affects whether the size of a potential payout is bounded by the contract.
Show the 7 extracted fieldsexpand
Data processing
Only on documented instructions from Controller
Sub-processors
30 days' notice before any sub-processor change
International transfers
EU Standard Contractual Clauses (Module Two)
Breach notification
Notify Controller within 72 hours of awareness
Audit rights
Controller audits up to once per calendar year
Termination
Delete or return all Personal Data within 30 days
Liability cap
Subject to the Agreement's limitation of liability
Cited evidence — every fact grounded in the source
key fact
urgent
read closely
DATA PROCESSING ADDENDUM
This Data Processing Addendum (the Addendum) supplements the Agreement between Northbridge Holdings, Inc. (Controller) and Lattice Robotics LLC (Processor) and applies to all Personal Data processed under it.
2. PROCESSING. Processor shall process Personal Data solely on documented instructions from Controller, including with regard to transfers of Personal Data to a third country.
4. SUB-PROCESSORS. Processor shall not engage a sub-processor without prior written authorisation, and shall give Controller at least thirty (30) days' notice of any intended change to its sub-processors.
5. INTERNATIONAL TRANSFERS. Transfers of Personal Data outside the EEA are made under the EU Standard Contractual Clauses (Module Two), which are incorporated into this Addendum by reference.
6. PERSONAL DATA BREACH. Processor shall notify Controller without undue delay and in any event within seventy-two (72) hours of becoming aware of a Personal Data Breach.
8. AUDITS. Processor shall make available all information necessary to demonstrate compliance and shall allow for and contribute to audits conducted by Controller no more than once per calendar year.
9.1 DELETION. Upon termination of the Services, Processor shall delete or return all Personal Data within thirty (30) days, unless retention is required by law.
11.1 LIABILITY. Each party's liability under this Addendum is subject to the limitations of liability set out in the Agreement.
Extracted by AI, re-checked by a second, independent Claude model with its own adversarial instructions — every fact grounded in the document, nothing invented.
AI-generated extraction. Not legal advice. We are not a law firm. No attorney-client relationship is created.
This output was produced by an automated AI system. This is mechanical data extraction only and reflects the AI's reading of the document text. Confidence scores reflect model uncertainty, not legal accuracy. Do not use this output for litigation, regulatory filings, employment classification, securities issuance, or settlement decisions. Some document types and clauses are excluded from extraction by policy; absence of a field does not indicate absence in the document. Use your own judgment.
This output was produced by an automated AI system. This is mechanical data extraction only and reflects the AI's reading of the document text. Confidence scores reflect model uncertainty, not legal accuracy. Do not use this output for litigation, regulatory filings, employment classification, securities issuance, or settlement decisions. Some document types and clauses are excluded from extraction by policy; absence of a field does not indicate absence in the document. Use your own judgment.
document fingerprint · SHA-256 d3c0a8f4b912… · extracted 2026-05-22T16:42:00+00:00