Legal

Data Processing Agreement

This Data Processing Agreement (DPA) applies to all TrustSpot customers who process personal data of EU or UK data subjects. Enterprise customers may request a countersigned copy.

Overview

This DPA forms part of the agreement between TrustSpot, Inc. ("Processor") and the customer ("Controller") and governs the processing of personal data in connection with the TrustSpot platform.

Data processing details

  • Subject matter: Processing of personal data to provide trust intelligence services
  • Duration: For the term of the subscription agreement
  • Nature: Collection, storage, analysis, and deletion of personal data
  • Purpose: Delivery of the TrustSpot platform as described in the subscription agreement
  • Types of data: Contact information, organizational data, and entity data as provided by the Controller

Sub-processors

TrustSpot uses a limited number of approved sub-processors to deliver the platform. A current list is maintained at trust.spot/sub-processors. Customers will be notified of any changes to this list with 30 days notice.

Data transfers

Where personal data is transferred outside the EEA, TrustSpot relies on Standard Contractual Clauses (SCCs) as approved by the European Commission.

Request a signed DPA

Enterprise customers may request a countersigned DPA by contacting legal@trust.spot. We aim to return signed agreements within 5 business days.