Data processing agreement (dpa) — Docmost

Cited by

Facts read from this source

• DPA exists Report an error

  “The terms of this Data Processing Addendum ("DPA") supplement the Subscription Agreement where Customer is entering into the Subscription Agreement on behalf of an Enterprise. Customer's acceptance of the Subscription Agreement shall be treated as its execution of this DPA and, where applicable, the Standard Contractual Clauses.”

• Laws covered Report an error

  “(a) the GDPR and any European Economic Area (the "EEA") Member State laws implementing the GDPR; (b) the California Consumer Privacy Act of 2018 (the "CCPA"), including as modified by the California Privacy Rights Act of 2020 (the "CPRA"), and the California Attorney General Regulations thereof; (c) the United Kingdom (the "UK") Data Protection Act 2018, as amended, and the GDPR, as incorporated into UK law (the "UK GDPR"); and (d) the Swiss Federal Act on Data Protection of 19 June 1992 and the revised version of 25 September 2020 and its corresponding ordinances (the "Swiss FADP").”

• Sccs Report an error

  “"Standard Contractual Clauses" means (i) where the GDPR applies, the contractual clauses annexed to the European Commission's Implementing Decision 2021/914 of 4 June 2021 available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj (the "EU SCCs"); (ii) where the UK GDPR applies, the International Data Transfer Addendum issued by the United Kingdom's Information Commissioner's Office to the EU Commission's Standard Contractual Clauses”

• Entity Report an error

  “Data Importer: Docmost, Inc. Contact Details: 251 Little Falls Dr, Wilmington, DE 19808, USA; dpo@docmost.com.”

• Breach notification hours Report an error

  “notify Customer without undue delay and in any event within seventy-two (72) hours after Docmost becomes aware of the Data Breach”

• Data deletion Report an error

  “Customer may, at any time during the term of the Agreement or upon termination of the Agreement, delete any workspaces containing Personal Data through the in-product administrative settings. Further, Docmost will, upon request, securely destroy or, at Customer's sole discretion, return all Personal Data (including all copies) and confirm to Customer that it has taken such measures”

• Dpia assistance Report an error

  “Upon Customer's request, Docmost shall provide Customer with reasonable cooperation and assistance needed to fulfil Customer's obligation under Applicable Data Protection Laws to carry out a data protection impact assessment related to Customer's use of the Service.”

• Subprocessor change notice days Report an error

  “If Customer wishes to object to the approval of a new Sub-processor, it must provide such objection in writing to Docmost within thirty (30) days after notice has been received.”

• List Report an error

  “Amazon Web Services, Inc. Hosting & infrastructure provider United States, European Union United States Hetzner Online GmbH Hosting provider European Union, United States Germany PostHog, Inc. Product analytics and monitoring >United States, European Union United States Backblaze, Inc. Object storage and backups United States, European Union United States Cloudflare, Inc. CDN, DNS, and security United States / Global United States AC PM, LLC (Postmark) Email delivery and notifications United States United States OpenAI, LLC AI Inference and AI Services United States United States Sentry, Inc. Error tracking United States, European Union United States Stripe, Inc. Payment processing United States United States turbopuffer Inc. Search United States, European Union United States Zendesk, Inc. Customer support United States United States”

• Regions Report an error

  “Purpose(s) of any data transfer and further Processing Purposes of the data transfer are to allow Docmost to provide the Services, which are hosted and processed on servers in the United States, or as otherwise agreed in an Order Form or other written agreement between the parties.”

• CCPA service provider Report an error

  “The parties agree that Docmost is a service provider as defined under CCPA, and that any Personal Data transferred to Docmost is done for a valid business purpose and for Docmost to perform the Services;”

• Encryption in transit Report an error

  “a. encryption of Personal Data in transit using TLS 1.2 or higher; b. regular vulnerability assessments and patching of systems involved in the Processing of Personal Data.”

• Access controls Report an error

  “b. enforce multi-factor authentication for administrative access to systems that Process Personal Data; c. implement role-based access controls and maintain access logs;”

• No sensitive data Report an error

  “Docmost does not intentionally collect sensitive or special categories of Personal Data, such as genetic data, health information, or religious information. These data elements should not be submitted to the Services without Docmost's consent, pursuant to section 14 of the Subscription Agreement.”

• No certifications claimed Report an error

  “Docmost will implement and maintain appropriate technical and organizational measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored or otherwise Processed.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Engineering Lead Permissions, SSO & administration
• The Engineering Lead European sovereignty
• The IT Administrator Permissions, SSO & administration
• The IT Administrator European sovereignty
• The Operations Lead Permissions, SSO & administration
• The Operations Lead European sovereignty
• The Quality Manager Permissions, SSO & administration
• The Quality Manager Import, export & self-hosting
• The Quality Manager European sovereignty
• The Skeptic Permissions, SSO & administration
• The Skeptic Import, export & self-hosting
• The Skeptic European sovereignty
• The Support Knowledge Manager Permissions, SSO & administration
• The Support Knowledge Manager Import, export & self-hosting
• The Support Knowledge Manager European sovereignty