Data processing addendum
If your procurement requires a signed data processing addendum, we have one ready. This page explains our DPA posture; the signed document is delivered by email.
Our DPA posture
Under our agreement with you, Arbor Lane is the data processor and you (the operator organization) are the data controller. We process personal data only on your documented instructions, only for the purpose of operating the service, and only by personnel who have agreed to confidentiality. For transfers of EU/UK personal data to the US, we use Standard Contractual Clauses. Our DPA template incorporates all of this and is ready to sign.
How to request a signed DPA
Email legal@arborlane.app with the subject "DPA request" and tell us your organization name. We'll send the DPA PDF and a DocuSign link within two business days. Most procurement reviews complete in under a week.
Sub-processors and notification
Our DPA includes the right of customers to subscribe to sub-processor change notifications and the 30-day advance notice commitment. See /legal/subprocessors for the current list and DPA links.