For business customers, institutional partners, and integrators that require a Data Processing Addendum under GDPR, UK-GDPR, or equivalent, Varyom Foundation offers a standard DPA that incorporates the current EU Standard Contractual Clauses and UK IDTA where relevant.
The DPA covers:
- Subject matter, duration, nature, and purpose of processing.
- Categories of data subjects and personal data.
- Confidentiality, security measures, and breach notification.
- Subprocessor governance (see Subprocessors).
- International transfers via SCCs / IDTA.
- Assistance with data-subject requests and DPIAs.
- Return or deletion of data at end of processing.
Request a countersignable copy at privacy@varyom.com.