Data Processing Agreement

Your organization decides what data to bring to Better Analyst and why. For that data you are the controller, and Better Analyst is the processor: we process it only to provide the service to you, under your instructions.

This covers what your team uploads or connects: files, connected databases and apps, chat prompts, and the results we generate from them.

• Account details of your users, such as names and email addresses.
• Files, datasets, and the contents of data sources your team connects.
• Prompts, chat history, dashboards, reports, and other outputs.
• Connection credentials, which are encrypted before they are stored.
• Activity records such as sign-ins and changes in the team audit log.

The application database and file storage run in AWS us-east-2 (Ohio, United States). Our subprocessors may process data in other locations, as described in the Privacy Policy.

We use a small set of subprocessors, such as our database, hosting, sandbox, and AI model providers. The current list, with what each one does, is on our subprocessors page.

Encryption in transit and at rest, isolated code sandboxes, row-level isolation between workspaces, single sign-on and provisioning, enforced two-factor authentication, and an append-only team audit log. The security page describes each control.

Your data is not used to train AI models, by us or by our AI model providers.

You can delete chats, files, and connections at any time, and deleting your account removes its data. On paid plans, data is kept until you delete it.

Send us your company's legal name and the email address of the person who will sign. If your organization uses its own DPA template, send that instead and we'll review it.

You can also email hello@betteranalyst.com.