Data Processing Addendum (template)

Version 1.0 · September 21, 2026

This Data Processing Addendum ("DPA") forms part of the Lexicor Terms of Service between the law firm named below ("Firm") and Coach OS LLC, a Florida limited liability company (document number L26000444666), Miami, Florida ("Processor").

Firm: __________ Signed by: _______ Date: ___

1. Roles

The Firm is the controller of personal information in its Lexicor matters ("Firm Data"). Processor processes Firm Data only on the Firm's documented instructions, including these terms, to provide Lexicor.

2. Nature and purpose

Receiving intake-line calls (transcript, caller number, call time, recording link) and holding them in transit until the Firm's app retrieves them; providing the Lexicor software, which stores matter records on the Firm's own computers; operating the Firm's workspace account.

3. Categories

Data subjects: prospective and current clients of the Firm, parties, witnesses and others named on calls; Firm personnel. Data: names, contact details, the caller's account of events (which may include health, criminal-history or immigration information), dates, recordings and documents the Firm adds.

4. Processor obligations

Processor will (a) process Firm Data only on the Firm's instructions; (b) ensure people with access are bound by confidentiality; (c) apply appropriate technical and organizational measures, including encryption in transit, access control and per-firm signed delivery; (d) delete intake copies held in transit within 30 days of arrival; (e) assist the Firm, at the Firm's request, in responding to requests from data subjects; (f) notify the Firm without undue delay, and in any event within 72 hours, after becoming aware of a security incident affecting Firm Data; (g) make available information reasonably necessary to demonstrate compliance.

5. Subprocessors

The Firm authorizes Processor's hosting and infrastructure providers. Processor will give notice of new subprocessors, and the Firm may object on reasonable grounds.

6. Confidentiality and privilege

Processor acknowledges that Firm Data may be subject to attorney-client privilege and work-product protection, will treat it as confidential, and will not access it except as needed to provide or support the service at the Firm's request or as the law requires. Processor will notify the Firm of any legal demand for Firm Data unless prohibited.

7. Return and deletion

Firm Data in matters lives on the Firm's computers and can be exported at any time. On termination Processor deletes any Firm Data it holds within 30 days, unless the law requires retention.

8. Term

This DPA lasts as long as Processor processes Firm Data for the Firm.

Coach OS LLC — Signed: _______ Name/Title: _______ Date: ____