This Data Processing Agreement (“DPA”) forms part of the agreement between Vigilcore Solutions Inc. (“Processor”) and the Client (“Controller”).

1. Purpose
Vigilcore processes personal data solely to provide building management and security services as contractually agreed.

2. Data Ownership
All data remains the property of the Client. Vigilcore does not claim ownership of any personal or operational data.

3. Processing Scope
Processing is limited to hosting, monitoring, support, analytics, and security operations necessary for service delivery.

4. Security Measures
Vigilcore implements appropriate technical and organizational safeguards, including access controls, encryption, and monitoring.

5. Sub‑Processors
Vigilcore may engage vetted sub‑processors for infrastructure and support, subject to confidentiality obligations.

6. Data Breach Notification
Vigilcore will notify the Client without undue delay upon becoming aware of a confirmed data breach.

7. Data Retention & Deletion
Upon termination, data will be retained or deleted in accordance with contractual and legal obligations.

8. Governing Law
This DPA is governed by the laws of Ontario, Canada.