Effective Date: November 10, 2025
This Data Processing Addendum (“DPA”) forms part of the Agreement between Verdapt. (“Processor”) and the customer (“Controller” or “Client”) using Verdapt Services.
Personal Data: Any information relating to an identified or identifiable natural person.
Processing: Any operation performed on Personal Data, including storage, transmission, or deletion.
Subprocessors: Third parties engaged by Verdapt to assist in Processing.
Client is the data controller. Verdapt is the data processor.
Verdapt will process Personal Data solely to provide the Services.
Client confirms lawful basis for Processing and is responsible for data accuracy.
Verdapt will:
Process only under Client instructions;
Maintain reasonable security controls;
Assist with data subject requests where applicable;
Notify Client of Data Breaches without undue delay.
Verdapt may use subprocessors. A list is available upon request. Verdapt will ensure subprocessors are bound to confidentiality and security obligations equivalent to these.
Transfers outside user’s region will follow lawful transfer mechanisms.
Verdapt will support Client in responding to requests for access, correction, deletion, or objection.
Upon termination, Verdapt will delete or return Personal Data, unless retention is required by law.
Verdapt implements appropriate technical and organizational measures to protect Personal Data.
Parties’ liability is governed by the underlying service agreement.
admin@verdapt(dot)com
