Data Processing Agreement
Our data processing agreement describes how we handle personal data on behalf of our customers — in compliance with the GDPR.
What is a data processing agreement?
A data processing agreement (DPA) is a legally binding agreement between a data controller and a data processor. Its purpose is to ensure that personal data is processed in compliance with the GDPR and other relevant legislation.
Why do we have a data processing agreement?
As a SaaS provider, we act as a data processor for our customers, who are the data controllers for their employees’ and users’ personal data. The agreement ensures that we process data securely and lawfully according to our customers’ instructions.
What our data processing agreement covers
Purpose and scope: which data we process, and for what purpose.
Security measures: the technical and organisational measures we have implemented to protect data.
Disclosure and subprocessors: whether and how data may be disclosed to third parties.
Deletion and return of data: how we handle data when the collaboration ends.
Rights and obligations for both the data processor and the data controller.
How do I accept the agreement?
By using our services, you accept our standard data processing agreement. If your organisation has specific requirements, we can discuss adjustments within the legal framework.
The latest update was made on 1 August 2025. The applicable version is always the most recent one available here, or the most recently signed version.