Legal

Data processing agreement

For business customers whose workspace holds personal data: what [Company legal name] does with it as your processor.

Parties and scope

This agreement is between the customer, as controller, and [Company legal name], [Registered address], as processor. It applies to personal data in the customer's workspace while the customer uses the service. [Name the main agreement it supplements.]

What is processed

Subject matter: providing the service. Duration: for as long as the customer's workspace exists, and the deletion grace period after it is deleted. Categories of data subjects and data: [List, for example the customer's staff and the people in tickets or conversations the customer connects.]

Instructions

The processor processes the data only on the customer's documented instructions, which include the configuration of the workspace and the approvals given in it. [Describe how instructions outside the service are given and recorded.]

Security

The technical measures are described on the trust center page, including database isolation per workspace, encrypted credentials, approvals before production writes and a tamper-evident audit log. [Add organisational measures: staff access, confidentiality, incident response.]

Subprocessors

The current subprocessors are listed on the subprocessors page. [State how much notice is given of a change and how the customer may object.]

Personal data breaches

[State how quickly, and with what information, the customer is told of a breach.]

Requests and assistance

The processor helps the customer answer requests from data subjects. A workspace owner can export the workspace's data themselves. [Describe further assistance and any charges.]

Deletion and return

When the customer deletes the workspace, its data is removed after the grace period and its stored files are erased. The customer may export it first. [State backup retention.]

Audits

[Describe audit rights, frequency, notice and cost.]

International transfers

[Name the transfer mechanism, for example standard contractual clauses, where one is needed.]

Signature

[Signature blocks for both parties.] Last updated: [Date].