Legal

Data Processing Addendum

A signed DPA is available on request for any customer processing personal data of EU, UK, or California residents under GDPR or CCPA.

Our DPA covers

  • The current sub-processor list (linked from the agreement)
  • Standard Contractual Clauses for cross-border transfers
  • 72-hour data breach notification
  • Data deletion within 30 days of contract termination
  • Audit and inspection rights
  • Reasonable redlines accepted on a Common Paper baseline

How to request

. We send the current template within one business day. Most negotiations close in a single round of redlines.