Data Processing Addendum

Controller and processor obligations, subprocessors, transfers, and assistance duties for enterprise customers.

Version
1.0
Status
Draft — pending legal review
Effective
2026-01-01
Reading time
2 min

Roles

For customer personal data processed to deliver the services, the customer is the controller (or business) and we act as processor (or service provider), processing only on documented instructions.

Processing details

  • Subject matter: delivery of the contracted services
  • Duration: the term of the agreement plus the retention period
  • Categories of data subjects: customer personnel, participants, and contacts
  • Categories of data: identifiers, contact details, engagement records, and content submitted

Confidentiality and security

Personnel with access are bound by confidentiality. We maintain the technical and organizational measures described in the Security Policy.

Subprocessors

We use vetted subprocessors for hosting, database, email delivery, calendaring, video, and payment processing. We maintain a current list, impose equivalent obligations, and give notice of changes with an opportunity to object.

International transfers

Where required, transfers rely on standard contractual clauses or another lawful mechanism, with supplementary measures as appropriate.

Assistance

We assist with data subject requests, security incident notification without undue delay, data protection impact assessments, and audits reasonably scoped to the services.

Deletion and return

On termination we delete or return customer personal data within the period stated in the Data Retention Policy, except where retention is legally required.

Changes to this document

We may update this document as our services, technology, and legal obligations evolve. Material changes are published with a new version number, an updated effective date, and a summary of changes in the version history below.

Continued use of our websites, products, services, experiences, or communities after an update takes effect constitutes acceptance of the current version.

Contact

Questions about this Data Processing Addendum may be sent to our legal and compliance contact through the contact form on this site. Please reference the document title and version number.

  • Legal & compliance requests: use the Contact Legal link on this page
  • Privacy and data rights requests: see the Consumer Privacy Rights policy
  • Accessibility accommodations: see the Accessibility Statement

Review notice

This document is a high-quality draft template prepared for review. It is not legal advice and no guarantee of compliance is made or implied. Final responsibility for legal sufficiency rests with the organization's licensed legal counsel.

Need a signed DPA?

We will countersign a data processing addendum for enterprise engagements.

Related policies