Data Processing Agreement

Scope

This DPA applies where we process personal data on your behalf as a processor. It works together with our Privacy Policy, security documentation and your order.

Security measures

• Encryption in transit and at rest, isolated project environments.
• SSO, role-based access and audit logging on business plans.
• Continuous monitoring, scanning and incident response.

Subprocessors & transfers

We use vetted infrastructure subprocessors listed on our site, with SCCs for international transfers where required. We notify customers of material changes.

Your rights

We help you answer data-subject requests with export and deletion tooling, and notify you of personal data breaches without undue delay.