JNN Global Ltd (trading as “VERYX”, part of Groupe Nseya Digital) · Updated 12 June 2026
This Data Processing Agreement (“DPA”) forms part of the Terms of Service between the subscribing organisation (“you”, the “Customer”, the controller) and JNN Global Ltd (trading as “VERYX”, part of Groupe Nseya Digital) (“we”, the processor). It governs our processing of the personal data you place into your workspace (“Customer Personal Data”). For your own platform account data — the identities and billing of your administrators — we act as an independent controller under the Privacy Policy, not as your processor. This DPA runs for the duration of your subscription and any retention period that follows.
We process Customer Personal Data only to provide and secure the platform on your documented instructions — storing and organising your records, executing the modules and AI agents you activate, generating your documents and analytics, and providing support. Your instructions are given through the Terms of Service, your configuration of the workspace, and your use of the product. We will tell you if, in our opinion, an instruction breaches UK GDPR, and we do not process Customer Personal Data for any purpose of our own (see the AI Usage & Data Policy: your data is never used to train foundation models).
Customer Personal Data covers whatever your organisation chooses to enter: typically the identity and contact details, role, activity, timesheets, communications and documents of your employees, managers, field and finance staff, and of the external parties you record — clients, contractors, subcontractors, consultants, suppliers, partners and other project participants. Special-category data should not be entered except where a module is explicitly designed for it.
We: (a) process only on your documented instructions; (b) ensure personnel authorised to process are bound by confidentiality; (c) implement the technical and organisational security measures described in the Security policy (tenant isolation, encryption in transit and at rest, field-level encryption for secrets, zero-trust RBAC, MFA, a tamper-evident hash-chained audit trail and UK data residency by default); and (d) assist you, taking into account the nature of processing, to meet your own UK GDPR obligations under sections 5–8 below.
You give general authorisation for us to engage the sub-processors listed in the Privacy Policy (hosting, database, payment gateways, AI providers and email delivery) to process Customer Personal Data. We impose data-protection obligations on each that are equivalent to this DPA, and we remain responsible for their performance. We will give you prior notice of any intended addition or replacement of a sub-processor and a reasonable period to object on legitimate data-protection grounds.
Taking into account the nature of processing, we assist you by appropriate technical and organisational measures — and through the platform’s own export and erasure tools — to respond to data-subject requests (access, rectification, erasure, restriction, portability and objection), and to meet your obligations on security, breach notification, data-protection impact assessments and prior consultation with the ICO. If a data subject contacts us directly about Customer Personal Data, we refer them to you and do not respond substantively ourselves. Requests: support@veryxjnn.com.
We notify you without undue delay after becoming aware of a personal-data breach affecting Customer Personal Data, with the information you reasonably need to meet your own notification duties to the ICO and to affected individuals. Every relevant action is preserved in the hash-chained audit trail.
Customer Personal Data is hosted with UK data residency by default. Where a sub-processor necessarily processes data outside the UK, that transfer is made under the UK International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses) together with any supplementary measures required, so your data stays protected to a UK-equivalent standard.
You may export your data at any time while your subscription is active. On termination, and at your choice, we return or delete Customer Personal Data in accordance with the retention terms in the Privacy Policy, except to the extent we are required by law to retain a copy. Suspension for non-payment never deletes data.
We make available the information reasonably necessary to demonstrate compliance with this DPA — including our security documentation and the audit evidence the platform itself produces — and allow for audits or inspections on reasonable notice, subject to confidentiality and to not compromising the security of other customers. Questions: support@veryxjnn.com.