Data Processing Agreement
Sign your DPA in one click.
A standard EU-style Data Processing Agreement governing how AltOrbit handles personal data on your behalf. Pre-filled, e-signable, no legal back-and-forth.
English is the authoritative version.
Document
AltOrbit Data Processing Agreement v3.2 · Standard Contractual Clauses (Module 2: Controller-to-Processor) · GDPR Art. 28
Controller
Your organisation (the workspace Owner)
Processor
AltOrbit (pre-incorporation; an EU legal entity is planned). Registered address published at incorporation.
Sub-processors
AWS, Cloudflare, Stripe, Resend, Sentry · Full list
Data categories
Workspace content, account data, billing data, operational metadata — full schema in Annex A
Transfer mechanism
EU SCCs (2021/914) for any data leaving the EEA · UK Addendum for UK data
Region
EU (Frankfurt). A US region is planned, with no committed date yet.
Audit rights
SOC 2 Type II report (when issued) + on-request answers to security questionnaires
Breach notice
Without undue delay, no later than 72 hours after we become aware
Term
Co-terminus with your AltOrbit subscription. Survives termination as needed for legal obligations.
Already signed? Find a copy in
Settings → Billing → LegalNeed a redlined version or a custom MSA? legal@altorbit.app — typical turnaround 3 business days.