Data Processing Agreement (DPA)

This DPA forms part of our Terms of Service and applies where we process personal data on behalf of our customers.

1. Scope and Roles

The customer is the Data Controller. We act as the Data Processor, processing personal data only as instructed.

2. Security Measures

We implement AES-256-GCM encryption at rest, TLS 1.2+ in transit, access controls, audit logging, and regular security assessments.

3. Data Breach Notification

In the event of a breach, we will notify the Data Controller without undue delay.