Download this document (Markdown) · Use your browser’s Print command to save a PDF.

Template — completion required. This document must be completed for the actual customer and deployment before signature. Publishing it does not execute its schedules or authorize processing.

EU Data Act Switching and Exit Rider

Proposed version AUT-EU-EXIT-2026-09-15.1. Not effective or published. Apply where the Services fall within the EU Data Act's data-processing-service provisions, after confirming scope and any specific exception. Complete the export register and operating commitments before accepting a covered Order. This Rider prevails over conflicting general exit provisions.

1. Switching choice and notice

Customer may request transfer to another provider of the same service type, transfer to its own infrastructure, or deletion of its exportable data and digital assets, as applicable under the Data Act. Autonomized will not impose contractual, commercial, or technical obstacles prohibited by that law. The notice period before initiating switching will be the shorter period in the Order or, if none is stated, 30 calendar days, and will never exceed the statutory maximum of two months.

Customer should identify the requested option, destination and authorized contact, relevant Services, and desired timing. Autonomized will provide reasonable assistance, information needed for the exit strategy, and known restrictions and continuity risks. Requests may be made through the verified support or legal-contact route without accepting a new liability waiver.

2. Transition and continuity

Switching will proceed without undue delay during a transition of no more than 30 calendar days after the applicable notice period, except as the Data Act permits. If that duration is technically unfeasible, Autonomized will explain the technical basis within 14 working days of the request and propose an alternative period that does not exceed seven months. Customer may extend the transition once for a period it considers appropriate for its own purposes, as provided by the Act.

Autonomized will maintain the contracted service during the transition with due care for continuity and security and will reasonably cooperate with Customer and its authorized destination provider. It will state known risks and requirements rather than guarantee functional equivalence beyond the duties applicable to this service type. Technical and security cooperation cannot require disclosure of unrelated customers' data or legally protected material outside the relevant duty.

3. Export scope and technical information

Before signature, the Order must incorporate an exhaustive schedule of portable data and digital-asset categories and any permitted exceptions concerning internal service-functioning information and protected provider trade secrets. At minimum, include all exportable data required by law. Do not use a generic intellectual-property label to exclude Customer's own data or defeat switching.

For the actual CRM deployment, determine the export status and format of contacts, tasks, appointments, pipelines, messages, permitted recordings and transcripts, documents, quotes, invoices/payment references, Customer knowledge, instructions and configurations, approval and action history, required metadata, and other relevant digital assets. Any technical limitation or third-party constraint must be specific and explained. This list is a completion aid, not an assertion that every export already exists.

Autonomized will provide the open interfaces, machine-readable exports, and information required for the applicable service type, including a current online register of relevant structures, formats, and interoperability specifications. The verified register URL must be inserted in the completed Order: [EU_EXPORT_REGISTER_URL].

4. Completion, retrieval, and erasure

The relevant service contract ends and Customer receives notice upon successful switching or, where Customer requests erasure instead, at the applicable end of notice as provided by the Act. Customer receives at least 30 calendar days for retrieval after the transition ends, or a longer agreed period. The general Terms' post-termination export-request window cannot shorten this period.

After successful switching and expiry of the applicable retrieval period, Autonomized will erase the Customer-generated or directly related exportable data and digital assets as required by law. Retention legally required on a separate basis must be narrowly identified and protected; it must not become an excuse to continue ordinary processing or retain everything indefinitely. Backup deletion and the handling of limited legal records must be reconciled with the applicable erasure duties before release.

5. Fees

From January 12, 2027, no switching charges will be imposed for the switching process where prohibited by the Data Act. Before then, any permitted reduced switching charge must be disclosed in the Order and must not exceed the directly related costs permitted by law. Ordinary service charges and any legally permissible early-termination amounts must be clearly distinguished; a prohibited switching charge cannot be relabelled as support, extraction, or administration. No undisclosed fee is created by this Rider.

6. Transparency and mandatory protections

The completed agreement must identify the current public information about the jurisdictions governing the relevant infrastructure and measures concerning unlawful third-country governmental access to EU-held nonpersonal data: [EU_INFRASTRUCTURE_TRANSPARENCY_URL]. Privacy and restricted-transfer duties remain governed by the DPA and applicable law.

The parties will cooperate in good faith. Unfair imposed data-related terms, improper liability exclusions, or unilateral interpretation rights are ineffective to the extent the Data Act provides. This Rider does not amend official GDPR standard contractual clauses or reduce data subjects' rights.

Required completion: applicability determination; covered Services; transition owner; exported/excluded categories and reasons; formats/interfaces; functioning register and transparency URLs; notice/transition/retrieval process; continuity/security evidence; erasure and backup process; disclosed lawful fees; responsible contacts; accepted Order and version.