RIA™ Data Processing Addendum (DPA)
Last Updated: December 2025
This Data Processing Addendum ("DPA") explains how Resilience Intelligence Advantage ("RIA," "we," "our," or "us") processes Personal Data on behalf of government subscribers ("Customer") when using the RIA™ platform.
This DPA forms part of the RIA Terms of Use and applies only when RIA acts as a Processor of Personal Data for a government Controller.
1. Roles and Responsibilities
Customer is the Controller
Customer decides what data is uploaded and how it will be used.
RIA is the Processor
RIA processes Personal Data only to provide the RIA service, support, and security.
RIA does not sell Personal Data or use it for advertising, AI training, or unrelated purposes.
2. What Limited Personal Data RIA Processes
RIA is designed to minimize Personal Data. Typical data includes:
- User name and email (for login)
- Role information
- Activity logs for security
- Optional notes entered by Users
RIA does not require sensitive personal information.
3. How RIA Uses Personal Data
RIA processes Personal Data only to:
- Authenticate Users
- Provide access to RIA
- Maintain platform security
- Provide support and troubleshooting
- Comply with legal obligations
RIA will never sell or share Customer Personal Data for marketing or commercial purposes.
4. Subprocessors
RIA uses carefully selected Subprocessors (e.g., hosting providers) to operate RIA. All Subprocessors are required to follow privacy and security obligations consistent with this DPA.
A current list is available upon request.
5. Security Measures
RIA maintains administrative, technical, and physical safeguards, including:
- Encrypted transmission
- Secure hosting
- Access controls
- Password and identity management
- Logging and monitoring
- Regular security training
Security details available upon request.
6. Government Records & FOIA
RIA acknowledges Customer may be subject to public records laws. RIA will support lawful disclosure requests without releasing RIA trade secrets, proprietary methods, or software code.
7. Data Retention & Deletion
Upon subscription termination, Customer may request deletion of Personal Data. RIA will delete or anonymize Personal Data unless retention is required by law.
Aggregated, anonymized data may be retained to improve platform performance and security.
8. Data Breach Notification
If RIA becomes aware of a confirmed Personal Data breach affecting Customer data, RIA will notify Customer without unreasonable delay and provide available information.
9. Customer Responsibilities
Customer agrees to:
- Ensure lawful collection of any Personal Data submitted to RIA
- Instruct Users to follow internal privacy and security practices
- Avoid uploading unnecessary Personal Data
- Maintain accurate account information
10. Governing Law
This DPA is governed by the laws of the State of Illinois, unless Customer's jurisdiction requires otherwise.
11. Contact
For privacy or data protection questions:
Short-Form DPA (Plain Language Version)
This short-form addendum is provided to help small and mid-sized government customers understand how Resilience Intelligence Advantage (RIA) handles personal data when you use the RIA™ resilience platform.
Note: This is a simplified explanation. The Full Data Processing Addendum (DPA) governs legally and can be downloaded above.
Who's Who
- You (the government customer) are the Controller. You decide what information is put into RIA and how your staff will use it.
- RIA is the Processor. We only process information to provide the RIA service and help you use the platform.
RIA does not sell data or use it for advertising, AI training, or anything unrelated to providing RIA.
What Information We Process
RIA is designed to keep personal information to a minimum. Typically, we process:
- Names and emails of your users (for login)
- Job role or department (optional)
- User activity logs (for security)
- Notes your staff chooses to enter
- Resilience or hazard-related data you upload
What RIA Does NOT Do
- Sell Personal Data
- Share Personal Data with outside marketers
- Use your data to train AI models
- Use your Personal Data to build any unrelated product