Define the processing agreement.
A review overview for procurement and security teams. An executed agreement establishes the binding terms where one is in place.
Contract review required. This page is an overview, not an executed Data Processing Addendum. Legal entity details, subprocessors, regions, retention, transfer provisions, and notice periods must be agreed before production processing.
Processing scope
Account data, approved cryptographic and asset metadata, evidence fingerprints, remediation workflow records, audit logs, and support records used to deliver the agreed service.
Items to agree
Identify the customer and provider legal entities, purposes of processing, authorized instructions, and permitted data categories.
Record approved providers, hosting regions, residency requirements, change notification, and any required transfer mechanism.
Agree retention by data category, customer export rights, deletion handling, backup treatment, and obligations at termination.
Document applicable controls, customer responsibilities, audit evidence, reporting contacts, and incident notice timelines.
Request the agreement
Contact the support team to begin the contract and security review for your proposed scope.
Contact the team Data boundary