Data Processing Addendum

LAST UPDATED · AUGUST 2026

This Data Processing Addendum ("DPA") supplements the Secorvia Terms of Service when Secorvia processes personal data on a customer's behalf as part of the Service, and reflects the obligations of a data processor to a data controller.

Roles

Where a customer submits personal data to Secorvia as part of using the platform (for example, contact details of team members invited to a workspace), the customer acts as the data controller and Secorvia acts as the data processor for that data.

Scope of processing

Secorvia processes personal data only to provide the Service: account and workspace administration, security-finding delivery, and support. Secorvia does not use customer data to train unrelated models or for any purpose outside providing the Service, and does not sell customer data.

Sub-processors

Secorvia uses a limited number of sub-processors to operate the Service: principally infrastructure hosting and transactional email delivery. Each sub-processor is bound by a written agreement requiring data protection standards consistent with this DPA. An up-to-date list is available on request.

Security measures

Secorvia maintains technical and organizational measures appropriate to the risk, including encryption in transit and at rest, least-privilege access controls, and audit logging of access to customer environments.

Data subject requests

Where Secorvia receives a request from a data subject regarding personal data it processes on a customer's behalf, Secorvia will forward the request to the relevant customer and provide reasonable assistance in responding to it.

International transfers

Where personal data is transferred across borders, Secorvia relies on appropriate safeguards recognized under applicable data protection law, such as standard contractual clauses.

Executing a signed copy

Enterprise customers who require a countersigned DPA (for example, incorporating Standard Contractual Clauses for their jurisdiction) should contact us to arrange one.

Contact

DPA requests and questions: legal@secorvia.com