Legal

Data Processing Addendum (DPA).

For customers subject to GDPR or similar data protection regimes.

Our standard DPA covers GDPR Article 28 obligations, sub-processor commitments, and security measures. We can countersign within two business days.

Request the DPA

Email us with your legal entity name and we'll send back a pre-filled, ready-to-sign DPA.

Request DPA →

What it covers

  • Roles & obligations (controller / processor)
  • Sub-processor list (Supabase, Stripe, model providers, hosting)
  • Technical & organisational security measures
  • International transfer mechanisms (SCCs)
  • Breach notification timelines
  • Data subject rights handling