Legal Documents
Request our Data Processing Agreement, review sub-processor commitments, and obtain compliance artifacts. NDA-gated documents are released after a short confidentiality acknowledgement.
Available documents
Data Processing Agreement (DPA v2)Pre-signed standard DPA — GDPR Art. 28, SCCs Module 2/3, CCPA service-provider terms, UK IDTA addendum, Annex A–B.NDA-gatedSub-Processor List (Annex B)Authoritative register of every sub-processor — data category, jurisdiction, certifications, and transfer mechanism.PublicISO 27001 Certification + SOC 2 Type II ReportCertification status and audit reports available under NDA — targeted Q4 2026 (ISO 27001) and Q3 2027 (SOC 2).NDA-gatedAnnual Penetration Test — Executive SummaryExternal CREST-accredited pen-test summary covering app, API, Azure config, multi-tenant isolation, and AI surface.NDA-gatedIncident Response SLABinding commitment: 15-min detect · 1-hr notify · 30-min contain · 5-day report. Pro-rata refund if SLA missed.Public
Contact
DPA v2Pre-signed · GDPR Art. 28 · SCCs · CCPA · UK IDTA
Request DPA v2
Email us your name, company, and business email. The pre-signed DPA v2 PDF is returned to your inbox — typically the same business day.
Request DPA by emailThe DPA is provided under a mutual confidentiality obligation (DPA v2 §12.3 and §13).