Data Processing Agreement

This is a summary placeholder to be reviewed and completed with your legal counsel before launch. It is not legal advice, and a signable DPA is available on request.

Roles

Where Euridium processes personal data contained in your workspace, you act as the controller and Euridium acts as a processor on your documented instructions, in line with Article 28 of the GDPR.

Scope & purpose

Euridium processes the data solely to provide the service — hosting your compliance register, evidence and assessments — and not for any independent purpose. We do not use your data to train models.

Security

We apply the technical and organisational measures described on our Security page, including EU hosting, tenant isolation and encryption.

Sub-processors

We engage a limited set of infrastructure sub-processors, listed on request and on the Security page, under appropriate contractual safeguards. We will inform customers of material changes.

Data location, rights & deletion

Personal data is processed on EU-based infrastructure where applicable. We assist you in responding to data-subject requests, and we return or delete personal data on termination, subject to legal retention requirements.

Requesting a signed DPA