divelai / legal / dpa
Data Processing Addendum
Divelai processes personal data on your instructions. The DPA is offered pre-signed so it does not become the slowest step in your procurement.
Roles
You are the controller; Divelai is the processor. Sub-processing is limited to the parties on the subprocessor list, with notice before changes.
Scope of processing
Categories of data, purposes, and duration follow your policy configuration — Divelai processes what you route to it and nothing else.
Transfers
Standard Contractual Clauses and the UK Addendum, with region pinning available for the vault. Transfer impact assessment support [CONFIRM]
Security measures
Annexed technical and organisational measures, matching the trust center.
Breach notification
Notification window and contents [CONFIRM]
Audit rights
Scope, frequency, and evidence provided in lieu of on-site audit [CONFIRM]
Download
Signed PDF [CONFIRM link] — or request a copy through the contact form.