Data Processing Agreement

This page will host the Data Processing Agreement (Art. 28 GDPR) for organisations that require one. The intended basis is the 2021 EU Standard Contractual Clauses, Module 2/3, adapted to this service.

Scope (planned)

• Categories of data processed on a customer's behalf, and processing purposes.
• Sub-processor list and notice of change — see Trust for the current status.
• Security measures, incident notification timeline, and audit rights.
• Data deletion/return on termination.

A signed DPA is not yet available. If you need one for procurement, contact sales@example.com.