Scope
This DPA governs Appstrate's processing of personal data on your behalf.
Nature of processing
Hosting, agent execution, webhook delivery, analytics, backup.
Security measures
ISO 27001-aligned controls. See /security for the full list.
Sub-processor list
At /security/sub-processors. Updated with 30-day advance notice.
SCCs
EU-approved standard contractual clauses, module 2 (controller-processor).
Signed version
Request at [email protected]. Countersigned within 5 business days.