Legal
Data Processing Addendum
For customers who process personal data with Foundry, our DPA sets out the terms under which we act as a processor.
Roles
You are the data controller for personal data you upload; Foundry acts as a data processor, handling it only on your instructions.
Our commitments
- -Process data only per your instructions
- -Apply appropriate technical and organizational measures
- -Bind sub-processors to equivalent obligations
- -Assist with data-subject requests
- -Notify you of qualifying data incidents
- -Delete or return data on termination
Sub-processors
We maintain a current list of sub-processors (hosting, payments, analytics) and update it as it changes.
International transfers
Where data is transferred across regions, we rely on appropriate safeguards such as standard contractual clauses.
Need a signed copy?
We're happy to countersign our DPA for your organization.