This is a summary. The full signed DPA accompanies every Master Services Agreement.
You are Data Controller. We are Data Processor.
Listed at /subprocessors. 30-day notice for additions.
AES-256 at rest. TLS 1.3 in transit. Per-tenant isolation. MFA. Background checks. Quarterly training. Annual pen testing. SOC 2 Type II in flight.
Within 48 hours of confirmation.
Annual, 30-day notice. SOC 2 Type II report (when issued) satisfies in lieu.
Within 30 days of termination.