5.3 Data Processing Agreement
The parties' data processing obligations are governed by Genudo's Data Processing Agreement ("DPA"), which is available at [https://genudo.ai/legal/dpa] and is incorporated into this Agreement by reference. The DPA includes:
(a) Details of data processing activities and data categories;
(b) Security measures and safeguards;
(c) Sub-processor arrangements;
(d) Data subject rights procedures;
(e) Data breach notification procedures;
(f) Cross-border data transfer mechanisms; and
(g) Audit rights and compliance obligations.