Data Processing Agreement
The terms governing processing of personal data contained in a customer workspace.
Last updated: August 2026
This document is being finalised. The sections below outline the structure of the final text, which will be published once the production architecture, subprocessors, analytics, billing and data handling configuration are confirmed.
Roles of the parties
Controller and processor responsibilities for workspace data.
Scope of processing
Subject matter, duration, nature and purpose of the processing, and categories of data.
Customer instructions
How processing instructions are given and followed.
Confidentiality
Obligations of personnel with access to customer data.
Security measures
Technical and organizational measures, described once the production security review is complete.
Subprocessors
Authorisation, listing and notification of changes to subprocessors.
International transfers
Transfer mechanisms applicable to the production configuration.
Assistance and audits
Support for data subject requests, incident notification and audit rights.
Deletion and return
Handling of customer data at the end of the agreement.
Questions in the meantime? Contact us.