Data Processing Agreement
Our DPA covers the processing of personal data when you use vote.direct services. It is written for organizations subject to the EU or UK GDPR and includes Standard Contractual Clauses for international data transfers. Signing a DPA does not by itself make either party compliant; your counsel decides what your organization needs.
What our DPA covers
Data Protection
Technical and organizational security measures including encryption, access controls, and breach notification procedures.
Processing Scope
Categories of personal data processed, data subject types, retention periods, and purpose limitations.
International Transfers
Standard Contractual Clauses (SCCs) and UK International Data Transfer Agreement (IDTA) for cross-border data flows.
Sub-Processor List
The named sub-processor list, each provider’s purpose, and its processing location, shared under NDA with the DPA.
Request our DPA
Email us for a copy of our Data Processing Agreement. The request goes to the founder, who reviews and signs DPAs himself.