At a glance
This page explains the scope of an enterprise processing arrangement. It is not an executed Data Processing Agreement, a security certification or a service-level commitment.
Define responsibility
The customer organisation determines its purposes for collecting and using farmer records and establishes the appropriate lawful basis. Where Openfarms Lab processes those records on its behalf, documented instructions and a Data Processing Agreement should govern that work. Openfarms Lab has separate responsibilities for processing it determines itself, as explained in the Privacy Policy.
The agreement should identify the parties, duration, purposes, processing activities, categories of people and information, and permitted instructions. A cooperative’s agreement with Openfarms Lab does not replace notices to farmers or the consents required for specific features.
Document the processing terms
- Confidentiality, personnel access, organisational permissions and security measures appropriate to the information.
- The authorised providers, processing locations, international transfer safeguards and any restricted AI routes.
- Assistance with access, correction, export, deletion, objections and other applicable rights.
- Incident reporting responsibilities, notification contacts, information to be supplied and agreed timelines.
- Retention schedules, legal holds, export arrangements, termination, deletion and treatment of backups.
- Subprocessor authorisation, change procedures, audit evidence and responsibilities for compliance assessments.
These matters need agreement for the actual service. They cannot be inferred from a general feature description or provider privacy notice.
Configure the organisation’s service
Before onboarding, establish who may administer the organisation, register farmers, access precise locations, view conversations and approve advice. Explain assisted consent and keep the notice version shown. Sharing arrangements between organisations need separate authority and access checks.
Decide whether AI advice, WhatsApp and optional training-content sharing are appropriate for the deployment. Record the relevant choices rather than treating them as one consent. Align provider restrictions and retention instructions with the configuration that actually runs.
Request enterprise documentation
Email hello@openfarmslab.com with your organisation name, proposed deployment, expected information categories, location requirements and procurement questions. Request the applicable processing agreement and available security and provider information.
Do not send farmer datasets, credentials or sensitive documents with an initial enquiry. Public policy pages do not claim ISO certification, SOC assurance, guaranteed Nigerian data residency or regulatory approval. Any such assurance must be supported by the relevant current evidence and agreed scope.