Partner Vetting Questionnaire – Nebula Genesis Tech, LLC

Confidential – For Internal Nebula Use & Due Diligence Record Only
Completion of this questionnaire is required before Nebula will execute a Data Sharing & Non-Identification Agreement. All responses constitute representations and warranties upon which Nebula will rely.

Partner / Institution: [Full Legal Name]
Contact Person: [Name & Title] Date: [Insert Date]

1. Data Siloing & Access Control

Describe the technical environment (cloud provider, on-premises, air-gapped, etc.) where the de-identified dataset will be stored and processed. Include encryption at rest and in transit standards.

2. Re-Identification Risk Mitigation

What internal protocols, training, and technical controls do you have to prevent staff from linking Nebula data with any external datasets (public or private)?

3. Sub-Processor Governance

Will any fourth-party contractors, students, or researchers have access? If yes, how are they contractually bound to the same no-re-identification and security obligations?

4. Incident Response Readiness

Confirm you have a documented process for notifying data providers of any breach or potential re-identification event within 72 hours. Attach or describe the relevant policy section.

5. Disposal Verification

Describe your methodology for permanent destruction of datasets (including backups) upon project completion. How will you certify destruction to Nebula?

Certification & Attestation

I certify under penalty of perjury that the foregoing responses are true, complete, and accurate. I understand that any material misstatement or subsequent failure to comply with the representations above will constitute a material breach of the Data Sharing & Non-Identification Agreement and may result in immediate termination, data destruction demands, and full indemnification liability.

Signature: _______________________________ Date: _______________
Printed Name & Title: ________________________________

Return completed questionnaire to: [email protected]
Upon satisfactory review, Nebula will countersign and return the Data Sharing & Non-Identification Agreement.

Governing Law: Illinois law. Disputes resolved per Nebula Terms of Service Section 11.