GDPR Documents

When you host personal data of your own users with us, you are the controller and we are your processor. These documents set out how we process that data on your behalf, as the GDPR requires.

Data Processing Agreement (DPA)
The contract between you and us about processing personal data on your behalf. It is part of our Terms of Service, so there is nothing to sign.
Read →
Technical and organisational measures (TOM)
Annex A of the DPA: how we keep personal data confidential, intact and available.
Read →
Sub-processors
Annex B of the DPA: the companies we work with, and which of them process personal data of our customers.
Read →

How we handle the personal data of our own customers is described in our data protection declaration.