GDPR

What is GDPR

The EU General Data Protection Regulation (GDPR) went into effect on May 25, 2018 If you're based in the EU or you have customers or contacts in the EU, you need to comply with the GDPR.

You are a Controller of personal data under GDPR, so you need to enter into GDPR-compliant data processing agreements with any online services and third party vendors you rely on. These agreements are commonly called a Data Processing Addendum, or DPA.

Data Processing Addendum

Processing EU personal data must be governed by a GDPR-compliant contract. We provide a standard Data Processing Addendum ( DPA ) to extend GDPR privacy principles, rights, and obligations everywhere personal data is processed.

Subprocessors

We use third party subprocessors, such as cloud computing providers and customer support software, to provide our services. We enter into GDPR-compliant data processing agreements with each subprocessor, and require the same of them.