Menlo Quay Medical - Data Processing Agreement (signed)
Documentexecuted Menlo Quay Medical · dpa · executed · 12 Dec 2025
Executed Data Processing Agreement signed on 12 Dec 2025 between BG-Demo (Processor) and Menlo Quay Medical (Controller) for the Growth subscription. It states no price, availability, response time or refresh terms.
What it says
What this says
As at Fri 9 Oct 2026Executed Data Processing Agreement signed on 12 Dec 2025 between BG-Demo (Processor) and Menlo Quay Medical (Controller) for the Growth subscription. It states no price, availability, response time or refresh terms.
What it is: an executed DPA alongside the Master Services Agreement. It covers "Delivery of the B-Viz Growth subscription and implementation", with data held in the Controller's own Snowflake account.
Commits: the Processor acts only on documented instructions, keeps confidentiality and security measures, and tells the Controller "without undue delay" of a personal data breach. It will not appoint another party to process the data without advance notice and a fair chance to object.
Unusual: the Controller may audit "on reasonable notice, during business hours". Where the DPA conflicts with the Master Services Agreement on personal data, "this agreement prevails".
Not settled: no price, service levels, breach notification deadline or contract term are stated. The Controller's signatory is not named, only "Authorised signatory of the Controller", so the customer's decision-maker is not shown.
As found in this document
As at Fri 9 Oct 2026- Date signed12 Dec 2025Source: the AI read of this record
- Processing instructionsprocess personal data only on the Controller's instructionsSource: the AI read of this record
- Breach notificationtell the Controller without undue delay if it becomes aware of a personal data breach affecting the Controller's dataSource: the AI read of this record
- Sub-processorswill not appoint another party to process the Controller's personal data without telling the Controller in advance and giving it a fair opportunity to objectSource: the AI read of this record
- International transferswill not move the Controller's personal data outside the Controller's Snowflake account, or to a different region, except on the Controller's written instructionSource: the AI read of this record
- Return and deletionat the Controller's choice, return or delete personal data it holds on the Controller's behalfSource: the AI read of this record
The document
Body
Menlo Quay Medical - Data Processing Agreement (signed)
Status: Executed. Signed on 12 Dec 2025.
This Data Processing Agreement sits alongside the Master Services Agreement between BG-Demo (the Processor) and Menlo Quay Medical of Galway, Ireland (the Controller).
Purpose and scope
The Processor provides B-Viz to the Controller. B-Viz is built and run inside the Controller's own Snowflake account. This agreement sets out how personal data is handled when the Processor works with that data to deliver the services.
Roles
The Controller decides why and how personal data is processed. The Processor processes it only on the Controller's documented instructions, which are the Master Services Agreement, this agreement and any written instruction given by the Controller's authorised contacts.
Subject matter and nature of processing
Read the whole document (3,830 characters)
| Item | Detail |
|---|---|
| Subject matter | Delivery of the B-Viz Growth subscription and implementation |
| Nature | Indexing, storing, querying and displaying data from the systems the Controller connects |
| Location of data | The Controller's own Snowflake account |
| Duration | The term of the Master Services Agreement, and any period needed to return or delete data afterwards |
| Data subjects | Customer contacts, hospital and distributor contacts and the Controller's own staff, as they appear in connected systems |
Processor obligations
The Processor will:
- process personal data only on the Controller's instructions;
- make sure that everyone authorised to process the data is bound by confidentiality;
- keep appropriate technical and organisational security measures in place;
- assist the Controller, where reasonably possible, in answering requests from data subjects;
- assist the Controller with its own security and impact assessments when asked;
- tell the Controller without undue delay if it becomes aware of a personal data breach affecting the Controller's data, and give the information the Controller needs to respond.
Controller obligations
The Controller will make sure it has a lawful basis for the data it connects to B-Viz, and that its instructions to the Processor comply with data protection law.
Sub-processors
Because B-Viz runs inside the Controller's own Snowflake account, the Controller keeps direct control of where its data is stored. The Processor will not appoint another party to process the Controller's personal data without telling the Controller in advance and giving it a fair opportunity to object.
International transfers
The Processor will not move the Controller's personal data outside the Controller's Snowflake account, or to a different region, except on the Controller's written instruction and in line with applicable law.
Audit and information
The Processor will give the Controller the information reasonably needed to show compliance with this agreement. The Controller may carry out an audit on reasonable notice, during business hours and without unreasonable disruption to the Processor's work.
Return and deletion
When the services end, the Processor will, at the Controller's choice, return or delete personal data it holds on the Controller's behalf. Data held in the Controller's own Snowflake account remains under the Controller's control.
Order of precedence
If this agreement conflicts with the Master Services Agreement on the handling of personal data, this agreement prevails.
Contacts
| Role | Name |
|---|---|
| BG-Demo Account Executive | Matteo Ricci |
| BG-Demo Customer Success Manager | Elena Novak |
Signatures
Signed for BG-Demo (Processor)
Name: Matteo Ricci
Title: Account Executive
Date: 12 Dec 2025
Signed for Menlo Quay Medical (Controller)
Title: Authorised signatory of the Controller
Date: 12 Dec 2025
Unusual terms
As at Fri 9 Oct 2026- DPA prevails over MSA on personal data
- Controller audit on reasonable notice
- No fixed breach notification deadline