Data Processing Agreement
Last updated
Template text. This document is a starting point, not legal advice. Have it reviewed by your own lawyer before you publish it.
Contents
This Data Processing Agreement (“DPA”) forms part of the agreement between Agento and the customer (“you”) and applies when Agento processes personal data on your behalf.
Roles
You are the controller of the personal data in Customer Content, and Agento is the processor. We process it only on your documented instructions, which include the Terms and your configuration of the Service.
Security measures
We maintain technical and organizational measures to protect personal data, including encryption in transit and at rest, scoped access per agent, audit logging, and regular third-party testing. We hold a SOC 2 Type II report, available on request.
Subprocessors
We use a limited set of subprocessors to provide the Service. We will notify you at least 30 days before adding a new subprocessor, and you may object on reasonable grounds.
Data breaches
We will notify you without undue delay, and in any case within 48 hours, after becoming aware of a personal data breach affecting your data.
Deletion and return
When your agreement ends, you can export your data, and we delete Customer Content within 30 days unless the law requires us to keep it.
Contact
To request a signed copy of this DPA, email legal@example.com.