Soma1. Plan retrieval before rollout
When incorporated into an order, these terms require an exit schedule for the agreed service. Identify exportable records, attachments, metadata and relevant configuration; specify formats, delivery, assistance, timing and lawful charges. Do not assume every module has a self-service export tool or that a backup is a portable export.
2. Switching and portability
Where the service and parties fall within EU Data Act rules for data processing services, implement applicable switching, contractual-information, assistance, continuity and retrieval duties. Mandatory notice and transition limits, minimum retrieval periods and switching-charge restrictions prevail over an order. Any permitted technical exception must be justified and documented; there is no blanket exemption for private-cloud or on-premises deployments.
Before signature, the order must provide current mandatory details and identify exportable data, digital assets, formats, interfaces, restrictions and the switching contact. See the Commission’s Data Act explanation. GDPR Article 20 portability and contractual business-data switching are distinct rights that may both apply.
3. Handover and access
Agree notice, supported export or assisted handover, validation and retrieval windows. EUTS must not shorten a mandatory window or obstruct legally required switching through suspension. The customer should verify completeness and usability, identify retention duties and revoke integrations, API keys and users when no longer needed.
4. Deletion and backups
At the customer’s choice under the DPA, EUTS must return or delete personal data and existing copies after services end, subject to Union or Member State storage requirements. Record deadlines separately for databases, files, indexes, embeddings, caches, connector copies, logs and final backup expiry. No indefinite backup exception is permitted.
Copies awaiting destruction or a specific legal hold must be isolated, protected and kept from ordinary use. Restore processes must reapply deletions. Record final destruction date, owner and evidence, including agreed confirmation. Necessary controller records such as invoices may have separate lawful retention; that does not authorise retaining an entire workspace.
5. Requests
Contact contact@euts.ai with your organisation and authorised contact, without credentials or full exports. Requests about customer-controlled data normally go to that customer first; EUTS must assist under the DPA.
SomaHQ · EUTS UG (haftungsbeschränkt)
contact@euts.ai · Legal hub