Roles
You are the controller. Brandeis acts as a processor for matter content and as a controller only for the limited operational metadata required to run the service.
Brandeis Practice Suite is now in private preview. Learn more
Legal
The Brandeis DPA forms part of every Master Service Agreement that involves personal data. It incorporates Korean PIPA controller-processor terms, the EU Standard Contractual Clauses, the UK IDTA, and a list of approved sub-processors.
You are the controller. Brandeis acts as a processor for matter content and as a controller only for the limited operational metadata required to run the service.
Sub-processors are listed in the Trust Center and updated thirty days before any change. You may object to a new sub-processor for a matter and we will provide alternatives.
Personal data may be transferred to Korea, the EEA, the UK, and the US under PIPA cross-border transfer mechanisms, SCCs, and the IDTA. Single-region engagements are available where transfers are restricted.