What the Kawaa Data Processing Agreement covers, when you need one, and how it applies to the personal data you verify with us.
What is a DPA?
A Data Processing Agreement is a legally binding contract between a data controller (you) and a data processor (Kawaa) that regulates the processing of personal data.
When you need a DPA
- Processing EU/EEA resident data
- Required by GDPR compliance
- Enterprise security requirements
- Vendor management policies
What our DPA includes
- Standard Contractual Clauses (SCCs)
- Data processing terms
- Security measures description
- Sub-processor list
- Breach notification procedures
How the DPA applies
Our DPA forms part of the Terms of Service and applies automatically whenever Kawaa processes personal data for you, so there is nothing to sign. If your procurement or vendor process needs a copy countersigned by Kawaa, email privacy@kawaa.com.