Data Processing Agreement
How we process personal data on your behalf.
Last updated: July 9, 2026
Overview
Auralis is operated by Zuro AI Inc. When you use Auralis to handle support conversations and connected knowledge sources, we process personal data contained in that Customer Data on your behalf. Our Data Processing Agreement (DPA) sets out the terms that govern this processing, and is available to customers on request.
Roles of the parties
You remain responsible for the personal data you submit and determine how it is used — you are the controller. Auralis acts as your processor, handling that data only to provide and support the Services, in line with our agreement with you.
Scope of processing
Customer Data includes the data, content, and materials you submit to the Services, including support conversations and connected knowledge sources. You retain all rights in your Customer Data. We receive only a limited, non-exclusive license to host, process, and transmit it to provide and support the Services.
Use of data and AI models
Unless expressly agreed otherwise in an Order or the DPA, we do not use your Customer Data to train foundation models for other customers. You can read more on our AI Data Handling page.
Sub-processors
We use a limited set of sub-processors to deliver the Services. Auralis runs on Amazon Web Services (AWS), a SOC 2 and ISO 27001-certified cloud provider, which hosts customer data. A current list of sub-processors is provided with the DPA on request.
Security measures
We protect personal data with technical and organizational measures, including encryption in transit (TLS 1.2 or higher) and at rest (AES-256), and least-privilege access to production systems with strong authentication and monitoring. More detail is on our Security & Trust page.
International transfers
Where personal data is transferred outside the EEA — for example to our cloud infrastructure — we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses.
Data subject rights
We support your compliance with data subject requests under the GDPR and the CCPA — including access, correction, deletion, restriction, objection, and portability — and handle them within the timeframes required by applicable law.
Retention
We retain personal data only for as long as necessary to provide the Services and to meet our legal obligations, in accordance with our data retention policy.
Requesting the DPA
To request a signed copy of our Data Processing Agreement, contact privacy@auralis.ai. For other legal questions, contact legal@auralis.ai.