Data Processing Addendum (DPA)

This DPA forms part of your agreement with us when we process personal data as your processor under applicable data protection laws (e.g., GDPR/UK GDPR).

1. Definitions

Terms such as “personal data,” “processing,” “controller,” and “processor” have the meanings given in applicable data protection laws.

2. Scope & Roles

You are the controller (or processor on behalf of another controller) and appoint us as processor to process personal data as described in the Agreement and this DPA.

3. Processing Instructions

We will process personal data only on your documented instructions, including with respect to transfers to a third country, unless required by law.

4. Confidentiality & Personnel

We ensure our personnel are subject to confidentiality obligations and receive appropriate training.

5. Security Measures

We implement technical and organizational measures appropriate to the risk, described in our Security Overview.

6. Sub-processors

You authorize our use of sub-processors to support the Services. We remain responsible for their compliance and will maintain a list of current sub-processors upon request.

7. Assistance

We will assist you in responding to data subject requests and in meeting security and breach notification obligations, considering the nature of processing and information available to us.

8. Audits

Upon reasonable notice and at most once annually, you may conduct (or have conducted) audits subject to confidentiality and security requirements.

9. International Transfers

Where we transfer personal data internationally, we will implement appropriate safeguards, such as Standard Contractual Clauses.

10. Return or Deletion

Upon termination of the Services, we will delete or return personal data, unless retention is required by law.

11. Priority & Changes

In the event of conflict between this DPA and the Agreement, this DPA prevails for processing of personal data. We may update this DPA as required by law.

This document is a template and not legal advice. Consult your counsel for compliance with applicable laws.