Data Processing Agreement

Draft — this document is under legal review and may change. Lawyer approval pending.

Last updated: October 9, 2026

Roles

For personal data in your workspaces, you are the controller and SociAgent is the processor. We process it only on your documented instructions.

Security and sub-processors

We apply technical and organizational measures (encryption of channel tokens, tenant isolation, access control) and use only the sub-processors listed on our sub-processors page.

International transfers

Data is stored in the EU. Where a sub-processor is outside the EU, transfers rely on Standard Contractual Clauses (SCC).

Data subject requests and deletion

We help you answer data subject requests. On account deletion your data is erased; you can export it first from Settings → Privacy.