SaaS-Specific Data Processing Agreement (DPA)

FormSyncer | SignSyncer | SendSyncer

Xpert Group FZE-LLC

This SaaS-Specific Data Processing Agreement (“SaaS DPA”) applies to all users of Xpert Group’s software platforms, including but not limited to FormSyncer, SignSyncer, and SendSyncer.

1. Roles of the Parties

  • Client / Customer: Data Controller

  • Xpert Group FZE-LLC: Data Processor

Xpert Group processes personal data solely to provide SaaS functionality as instructed by the Controller.

2. Categories of Data Processed

Depending on platform usage:

  • Names, email addresses, phone numbers

  • Business contact details

  • Uploaded documents and form data

  • Digital signatures and metadata

  • Expiry dates, reminders, and workflow logs

3. Purpose of Processing

  • Automating forms, documents, and signatures

  • Generating PDFs and workflow records

  • Sending reminders, alerts, and notifications

  • Maintaining system logs and audit trails

4. Processor Obligations

Xpert Group shall:

  • Process data only on documented instructions

  • Ensure confidentiality of personnel

  • Implement industry-standard security controls

  • Assist with data subject rights requests

  • Notify of any personal data breach without undue delay

5. Sub-Processors

Authorized sub-processors may include:

  • Cloud hosting providers

  • Email and messaging platforms

  • Storage and backup services

All sub-processors are contractually bound to equivalent data protection standards.

6. International Data Transfers

Where SaaS infrastructure involves cross-border processing:

  • Adequate safeguards are applied

  • Transfers comply with UAE PDPL and equivalent standards

7. Data Retention & Deletion

  • Data is retained only for the duration of the service

  • Upon termination, data is deleted or returned upon request

  • Backups are securely overwritten within reasonable timelines

8. Audits & Compliance

Clients may request compliance confirmation subject to reasonable notice and confidentiality safeguards.

9. Governing Law

This SaaS DPA is governed by the laws of the United Arab Emirates.