Data Processing Agreement
Get your DPA signed by email.
A standard EU-style Data Processing Agreement governing how AltOrbit handles personal data on your behalf. Pre-filled and ready to sign — request it by email.
English is the authoritative version.
Document
AltOrbit Data Processing Agreement (GDPR Art. 28), with the EU Standard Contractual Clauses for any transfer outside the EEA
Controller
Your organisation (the workspace Owner)
Processor
AltOrbit (pre-incorporation; an EU legal entity is planned). Registered address published at incorporation.
Sub-processors
OVHcloud, Cloudflare, Vercel, Stripe, Resend, Sentry, Expo and an AI model provider (USA) · Full list
Data categories
Data subjects: your employees and contractors, and your clients' contacts. Data: account data, time and leave records (including sick-leave dates — health data), pay rates and salaries, chat and files, billing and operational metadata.
Transfer mechanism
EU SCCs (2021/914) for any data leaving the EEA · UK Addendum for UK data
Region
EU: database in Frankfurt, files in Western Europe. The web app is served through Vercel, AI features use a US-based provider and push notifications go through Expo (US), under SCCs.
Audit rights
Answers to your security questionnaires on request; audits under GDPR Art. 28(3)(h) on reasonable notice
Breach notice
Without undue delay, no later than 72 hours after we become aware
Term
Coterminous with your AltOrbit subscription. Survives termination as needed for legal obligations.
Already signed? We keep your counter-signed copy on file and re-send it on request — it isn't stored in the app yet.
Need a redlined version or a custom MSA? legal@altorbit.app — we reply within 2 business days.