California Privacy Rights Act (CPRA) Addendum

Last updated: 9/29/2026


This CPRA Addendum (“Addendum”) supplements the Terms of Service and the Data Processing Agreement (“DPA”) between Veritas Software (“Service Provider”) and the customer (“Business”) who uses the Services provided through Automated-Agent (“Services”). This Addendum applies solely to the extent the Service Provider processes Personal Information of California residents on behalf of the Business under the California Privacy Rights Act (“CPRA”).

1. Definitions

  • “Business” means the entity that determines the purposes and means of processing Personal Information.
  • “Service Provider” means Veritas Software, which processes Personal Information on behalf of the Business.
  • “Personal Information” has the meaning given in the CPRA and includes any information relating to an identified or identifiable California resident.
  • “Sensitive Personal Information” means Personal Information defined as sensitive under the CPRA.
  • “Services” means the software, platform, and related services provided by Veritas Software.

2. CPRA Compliance

The Service Provider certifies that it understands and will comply with the restrictions and obligations set forth in the CPRA when processing Personal Information on behalf of the Business.

3. Permitted Purposes

The Service Provider will process Personal Information solely for the following purposes:

  • providing, maintaining, and improving the Services;
  • performing functions described in the Business’s documented instructions;
  • ensuring security, fraud prevention, and system integrity;
  • debugging, error correction, and service optimization;
  • internal operations necessary to provide the Services;
  • any other purpose explicitly authorized by the Business in writing.

The Service Provider will not process Personal Information for any purpose other than those permitted by the CPRA and documented by the Business.

4. Prohibited Uses

The Service Provider agrees that it will not:

  • sell or share Personal Information;
  • use Personal Information for cross‑context behavioral advertising;
  • retain, use, or disclose Personal Information outside the direct business relationship with the Business;
  • combine Personal Information with data obtained from other sources, except as permitted by the CPRA;
  • use Personal Information for any purpose not explicitly authorized by the Business.

5. Sub‑processors

The Business authorizes the Service Provider to engage sub‑processors as necessary to provide the Services. The Service Provider will ensure all sub‑processors are bound by obligations equivalent to those in this Addendum and the DPA.

A current list of sub‑processors is available upon request via our contact us page.

6. Consumer Rights Assistance

The Service Provider will assist the Business in fulfilling its obligations under the CPRA, including responding to:

  • requests to know, access, or delete Personal Information;
  • requests to correct Personal Information;
  • requests to limit the use of Sensitive Personal Information;
  • requests to opt out of data sharing.

7. Security Measures

The Service Provider will implement and maintain reasonable security procedures and practices appropriate to the nature of the Personal Information, including:

  • encryption in transit and at rest;
  • access controls and authentication;
  • audit logging and monitoring;
  • regular security assessments;
  • data backup and recovery procedures.

8. Notification of Breach

In the event of a Personal Information breach, the Service Provider will notify the Business without unreasonable delay and provide information necessary for the Business to comply with its legal obligations.

9. Deletion or Return of Personal Information

Upon termination of the Services, the Service Provider will delete or return Personal Information to the Business, unless retention is required by law.

10. Governing Law

This Addendum is governed by the laws of AZ, without regard to conflict‑of‑law principles.

11. Contact Information

For questions regarding this Addendum, please contact us.