Information about our Data Processing Agreement (DPA).
What is a DPA?
A Data Processing Agreement is a legally binding contract between a data controller (you) and a data processor (Kawaa) that regulates the processing of personal data.
When You Need a DPA
- Processing EU/EEA resident data
- Required by GDPR compliance
- Enterprise security requirements
- Vendor management policies
Our DPA Includes
- Standard Contractual Clauses (SCCs)
- Data processing terms
- Security measures description
- Sub-processor list
- Breach notification procedures
How the DPA applies
Our DPA forms part of the Terms of Service, so it applies to your account from the moment you accept them — there is nothing to sign online. If your procurement or vendor process needs a countersigned copy, email dpo@kawaa.com.