Data Processing Agreement (DPA)

Last updated: October 22, 2026

This Data Processing Agreement ("DPA") is an addendum to the Simbavault Terms of Service between Simbavault ("Processor") and you ("Controller"). This DPA reflects the parties' agreement with regard to the processing of personal data.

1. Definitions

Terms such as "Personal Data", "Processing", "Data Subject", "Controller", and "Processor" shall have the meanings ascribed to them in the applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

2. Processing of Personal Data

The Processor shall only process Personal Data on behalf of and in accordance with the Controller's documented instructions. The Controller's initial instructions to the Processor are that the Processor will process Personal Data for the purpose of providing the Services as set out in the Terms of Service.

3. Security Measures

The Processor will implement and maintain appropriate technical and organizational security measures to protect Personal Data from security incidents and to preserve the security and confidentiality of the Personal Data. These measures are further detailed on our Security page.

4. Data Subject Rights

The Processor will, to the extent legally permitted, promptly notify the Controller if it receives a request from a Data Subject to exercise their rights. The Processor will provide the Controller with reasonable cooperation and assistance in relation to any such Data Subject request.

5. Sub-processors

The Controller agrees that the Processor may engage third-party sub-processors to process Personal Data on the Controller's behalf. The Processor will impose data protection terms on any sub-processor it appoints that are equivalent to those in this DPA.

Contact Us

If you have any questions about this DPA, please contact us: support@simbavault.com.