Data processing agreement (dpa) — Outline

Cited by

Facts read from this source

• Entity Report an error

  “General Outline, Inc. a Delaware corporation located at 228 Park Ave S, PMB 377005, New York, New York 10003-1502”

• DPA exists Report an error

  “This Data Processing DPA (“DPA”) supplements the Terms of Service (the “Agreement”)”

• Laws covered Report an error

  “(i) the California Consumer Privacy Act (“CCPA”), (ii) the General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR” or “GDPR”), (iii) the Swiss Federal Act on Data Protection, (iv) the EU GDPR as it forms part of the law of England and Wales by virtue of section 3 of the European Union (Withdrawal) Act 2018 (the “UK GDPR”); (v) the UK Data Protection Act 2018; and (vi) the Privacy and Electronic Communications (EC Directive) Regulations 2003”

• Sccs Report an error

  ““Standard Contractual Clauses” means the EU SCCs and the UK SCCs.”

• EU scc version Report an error

  “the standard contractual clauses approved by the European Commission in Commission Decision 2021/914 dated 4 June 2021”

• Primary processing region Report an error

  “Outline’s primary processing operations take place in the United States”

• Deletion Report an error

  “Following completion of the Services, at Customer’s choice, Outline shall delete Customer’s Personal Data, unless further storage of such Personal Data is required or authorized by applicable law.”

• Change notice Report an error

  “At least fifteen (15) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Outline will add such third party to the List and notify Customer via email.”

• List Report an error

  “Amazon Web Services, Inc. Hosting United States Cloudflare, Inc. Content delivery network United States Datadog, Inc Service monitoring United States Fly.io Hosting United States Functional Software, Inc. (Also known as Sentry) Error monitoring United States Help Scout Email support United States Heroku, Inc Hosting United States Itteco Software Corp URL unfurling Canada Mailgun Technologies, Inc. Email delivery United States OpenAI Generative AI United States PagerDuty, Inc. Incident response United States Retool, Inc. Internal tooling United States Stripe, Inc. Billing United States”

• Security measures Report an error

  “Outline shall maintain appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing Personal Data.”

• Breach notification Report an error

  “In the event of a Personal Data Breach, Outline shall, without undue delay, inform Customer of the Personal Data Breach”

• Audit rights Report an error

  “such audit shall only be performed during business hours and occur no more than once per calendar year”

• Record retention Report an error

  “retain such records for a period of three (3) years after the termination of the Agreement”

• Controller role Report an error

  “with respect to Customer Account Data and Customer Usage data, Outline is an independent controller, not a joint controller with Customer.”

• Order of precedence Report an error

  “the order of precedence will be: (1) the applicable terms in the Standard Contractual Clauses; (2) the terms of this DPA; (3) the Agreement; and (4) any other written agreement executed by the parties.”

• Personal data categories Report an error

  “Categories of Personal Data include name, location, email address, physical address, unique identifiers such as passwords.”

• Data subjects Report an error

  “Categories of Data Subjects: Customer end-users/customers and Customer employees”

• Subprocessor list on request Report an error

  “Outline will maintain and provide a list of its Sub-Processors upon request.”

• Importer contact Report an error

  “Name: General Outline, Inc. Address: hello@getoutline.com”

Scores citing this record

• The Engineering Lead Import, export & self-hosting
• The Engineering Lead European sovereignty
• The IT Administrator Import, export & self-hosting
• The IT Administrator European sovereignty
• The Operations Lead Import, export & self-hosting
• The Operations Lead European sovereignty
• The Quality Manager Import, export & self-hosting
• The Quality Manager European sovereignty
• The Skeptic Import, export & self-hosting
• The Skeptic European sovereignty
• The Support Knowledge Manager European sovereignty