Legal
Data processing agreement
If your organisation needs a data processing agreement before using a hosted plan, here is what it covers and how to get one.
This is a working draft, not legal advice. We review the final text before launch. Questions go through the contact page.
When you need one
In local mode there is usually no processor relationship to paper over, because the data stays with you. A DPA becomes relevant once you use Soriku Cloud or a hosted Team workspace, where we process data on your behalf.
What it covers
Subject matter and duration, the nature and purpose of processing, the categories of data, the security measures, sub-processors, data-subject rights, and breach notification. The full template and the detail are in the DPA docs.
How to request one
Ask through the contact page and we send the current template. Enterprise customers get a reviewed DPA tailored to their use case as part of compliance support.