📑 Contractual and Audit Documentation

1. Purpose

This document covers Nemu Inc.’s approach to contractual privacy terms, data processing agreements, and external audit reports related to its services.

2. Standard Agreements

• Nemu Inc. may maintain standard templates for:
  • Customer terms of service.
  • Data Processing Agreements (DPAs).
  • Vendor/subprocessor agreements with privacy and security clauses.

3. Governance Processes

• Material changes to contractual templates or privacy clauses are reviewed by leadership and, where applicable, legal counsel.
• Customers may request copies of relevant terms and data protection commitments.

4. External Audit Reports

• Where available, Nemu Inc. may obtain or reference external audit reports from CSPs (e.g., SOC 2 reports for Supabase, Render, Google Workspace).
• Nemu Inc.’s own controls are informed by these external reports and aligned frameworks.

5. Audit Evidence

• Copies of standard DPAs or contract templates (redacted as needed).
• Listing of major CSP audit reports relied upon.
• Documentation of review processes for contracts.

6. Compliance Mapping

• SOC 2: CC1.3, P3.1
• ISO 27001:2013: A.15.1.1, A.18.1.4

Contact: support@mynemu.com
© 2025 Nemu Inc.. All rights reserved.