# Data Processing Agreement (DPA): Erayaha EIA

Version 2.2 • Standard Technical & Organizational Measures (TOMs)

## 1. Scope & Instructions
This DPA governs the processing of project data submitted by the Client ("Data Controller") to Erayaha ("Data Processor") for statutory pre-submission environmental clearance audits.

## 2. Technical Measures
- Ephemeral processing in isolated RAM runtimes.
- Role-based access control with multi-factor authentication.
- TLS 1.3 encryption in transit and AES-256 at rest.
- Immutable tamper-evident audit logs.