Data Processing Agreement
Draft pending legal review. This page is not an executed DPA.
A data-processing agreement must reflect the actual deployment, the parties involved and the services each party operates. Browsing this page or requesting a demo does not execute an agreement.
What needs to be agreed
- The legal parties, controller/processor roles, documented instructions and duration of processing.
- Data subjects, data categories, purposes and the services that receive content.
- The actual subprocessors, hosting regions and any international-transfer mechanisms.
- Technical and organisational measures appropriate to the configured deployment.
- Incident notification, assistance with rights requests and audit arrangements.
- Data return, deletion, backup retention and termination procedures.
No default provider assurances
Provider contracts, data residency and retention terms cannot be inferred from the application. This page does not assert that provider DPAs, transfer clauses or special data-use agreements have been signed. Self-hosting the application does not remove the need to review external processing.
Discuss your deployment
Contact privacy@kyndex.io with your intended hosting model and service providers. Do not send personal data or credentials. Confirm applicable terms with authorised representatives before production processing.