<!--
  ┌────────────────────────────────────────────────────────────────────────┐
  │  FICTIONAL TEACHING DOCUMENT — "Claude for Legal: A Guided Tour"          │
  │  A synthetic Data Processing Addendum, invented for practice. Here        │
  │  Sablefield is the CONTROLLER and Wickline Perception (AI-vision vendor)  │
  │  is the PROCESSOR. Written with planted, documented issues so a DPA-      │
  │  review skill (controller side) has something to find:                   │
  │    §4  "Processor may use Customer Data to improve and train its models"  │
  │    §6  subprocessors allowed with NO list and no real notice             │
  │    §5  "industry-standard security" with no annex / no specifics         │
  │    §7  international transfer to a non-adequate country, NO SCCs/mechanism │
  │  Not legal advice; not a model DPA. Free to reuse for learning.          │
  └────────────────────────────────────────────────────────────────────────┘
-->

# Data Processing Addendum

**Between Sablefield Robotics, Inc. (“Customer” / Controller) and Wickline Perception, Inc. (“Processor”)**

> This Addendum governs Processor's processing of personal data contained in the image and video frames and
> associated metadata that Customer transmits to Processor's computer-vision platform. It supplements the
> parties' subscription agreement.

## 1. Definitions

“Customer Data” means the data Customer submits to the platform, including camera frames captured by
Customer's robotic systems and any personal data depicted in or derived from them.

## 2. Processing

Processor shall process Customer Data to provide the perception and object-recognition services described in
the subscription agreement.

## 3. Customer obligations

Customer is responsible for providing all notices and obtaining all consents required for Customer's
collection of the Customer Data.

## 4. Use of data

In addition to providing the services, **Processor may use Customer Data to develop, improve, and train its
models, algorithms, products, and services**, including after termination, provided that outputs are not
attributed to Customer by name. This right survives termination of the subscription agreement.

## 5. Security

Processor shall protect Customer Data using **industry-standard security measures.**

## 6. Subprocessors

**Processor may engage subprocessors as it deems necessary to provide the services.** A current description of
subprocessors is available from Processor on request.

## 7. International processing

Customer acknowledges that Processor and its subprocessors **process and store Customer Data on servers
located in jurisdictions of Processor's choosing, which may include locations outside the United States and
the European Economic Area.** Customer consents to such processing.

## 8. Data subject requests

Processor shall provide reasonable assistance to Customer in responding to data subject requests, at
Customer's expense.

## 9. Deletion

Upon termination, Processor shall delete Customer Data within ninety (90) days, **except for Customer Data
incorporated into trained models and derived datasets, which Processor may retain.**

## 10. Governing law

This Addendum is governed by the laws of the State of New York.