Canada · Version August 15, 2026
Data Processing Agreement
This Data Processing Agreement forms part of the Clara Terms between Clara Software Inc. (Clara) and the practice accepting it (Customer). It applies when Clara processes personal information or personal health information for Customer.
1. Roles and instructions
Customer determines why client information is processed and remains responsible for its collection and use. Clara processes that information only to provide, secure, support, and improve the services under Customer’s documented instructions and applicable law.
2. AI and delegated processing
When Customer enables an AI-assisted or delegated administrative feature, Clara may process the minimum Customer data needed to draft, transcribe, summarize, communicate, schedule, or complete that configured task. Clara does not use Customer data, Client data, personal health information, communications, audio, transcripts, or notes to train or fine-tune general-purpose or Clara machine-learning models.
3. Confidentiality and safeguards
Clara limits access to authorized personnel and subprocessors subject to confidentiality duties. Clara maintains administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls, encryption in transit and at rest, audit logging, and recovery procedures.
4. Subprocessors and location
Customer authorizes Clara to use subprocessors needed to provide the services. Clara remains responsible for their processing under written terms that protect information to a substantially similar standard. Clara will provide notice of material subprocessor changes. Customer data is hosted in the country selected during signup unless Customer agrees otherwise.
5. Security incidents
Clara will notify Customer without undue delay after confirming unauthorized access to Customer data and will provide available information reasonably needed for Customer’s investigation, notice, and remediation duties.
6. Individual requests
Taking into account the nature of the processing, Clara will reasonably assist Customer with access, correction, portability, restriction, deletion, consent withdrawal, complaint, and regulator requests that concern Customer data.
7. Retention, return, and deletion
Customer may export Customer data during the subscription. At termination, Clara will return or delete Customer data according to the Terms, documented retention schedules, legal holds, backup cycles, and any health-record retention instructions Customer is legally required to apply.
8. Evidence and cooperation
Clara will make available information reasonably necessary to demonstrate compliance with this Agreement and will cooperate with proportionate privacy or security assessments, subject to confidentiality, security, and cost controls.
9. Order and duration
This Agreement begins when Customer accepts it and continues while Clara processes Customer data. If it conflicts with the Terms on privacy or data-processing matters, this Agreement controls. Mandatory privacy and health-information law always applies.
Electronic acceptance during Clara signup records the practice, authorized owner, country, agreement kind, version, and acceptance time.