Data processing agreement (dpa) — Databox

Cited by

Facts read from this source

• DPA effective date Report an error

  “Effective December 21st, 2023”

• DPA part of tos Report an error

  “This Data Processing Agreement (“DPA”) forms part of the Terms of Service (available at https://databox.com/terms-of-service) (“ToS”) and Privacy Policy”

• DPA roles Report an error

  “The parties acknowledge that Customer is a Controller and maintains control over Data Subjects’ Personal Data and Databox is a Processor.”

• Trust portal Report an error

  “it will implement and maintain a reasonable and appropriate security program comprising adequate security, technical and organizational measures to protect against unauthorized, unlawful or accidental processing, use, erasure, loss or destruction of, or damage to, Customer Personal Data and as further described in Databox’s Trust Portal (https://trust.databox.com/)”

• Data return deletion Report an error

  “Upon termination or expiration of the Agreement, at Customer’s request Databox will either promptly (i.e., in no more than 30 days) return or destroy the Customer Personal Data in its possession or control.”

• CCPA service provider Report an error

  “Databox may be considered a “service provider” as defined in CCPA Section 1798.140(ag)(1), as applicable.”

• Sccs governing law Report an error

  “In Clause 17 (Option 1), the SCCs will be governed by Irish law; In Clause 18, disputes will be resolved before the courts of Ireland;”

• Swiss fadp transfers Report an error

  “Accordingly, the parties hereby agree that SCCs authorizing such transfers shall apply as implemented below: The terms “General Data Protection Regulation” or “Regulation (EU) 2016/679” as utilized in the SCCs shall be interpreted to include the FADP with respect to data transfers subject to the FADP;”

• Subprocessor notice days Report an error

  “Databox will maintain an up-to-date list of its Subprocessors, which it will provide prior notice to Customer of any change in Subprocessors at least 30 days prior to the change”

• Audit rights Report an error

  “at Customer’s expense, allow for and contribute to audits, including inspections, conducted by the Customer or an independent third-party auditor mandated by the Customer. Any such audits or inspections shall be limited to one time in any rolling 12-month period”

• Accepted audit reports Report an error

  “If the requested audit scope is addressed in an SSAE 16/ISAE 3402 Type 2, ISO, NIST or similar audit report performed by a qualified third-party auditor (“Audit Reports”) within twelve (12) months of Customer’s audit request and Databox confirms there are no known material changes in the controls audited, Customer agrees to accept those findings in lieu of requesting an audit of the controls covered by the report.”

• Breach notification contact Report an error

  “Any notifications made under this section shall be made to compliance@databox.com (when made to Databox)”

• SOC 2 badge Report an error

  “SOC 2 CERTIFIED”

• Entity Report an error

  “Name: Databox, Inc. Address: 6 Liberty Square, PMB #471, Boston, MA 02109 USA”

• Categories Report an error

  “First name, last name, email address and business phone number of employees and representatives of data exporter.”

• Retention Report an error

  “For the Term set forth in the Agreement.”

• Sensitive data Report an error

  “Sensitive data transferred (if applicable) and applied restrictions or safeguards”

• List Report an error

  “Amazon Web Services (AWS), Cloud Hosting S3 (Amazon S3), Cloud Hosting (Object Storage) Google Cloud, Cloud Services HubSpot, CRM and Ticket management Intercom, Chat and Ticket Management Asana, Project Management SendGrid, Email Delivery Twilio SMS, SMS Delivery OpenAI, Generative AI Anthropic, LLM Services LangChain, LLM Services Slack, Project Management Mixpanel, Analytics Segment, Analytics LiveSessions, Analytics Pusher (by Bird), Application Messaging SurveyMonkey, Customer Surveys Stripe, Payment Processor FusionAuth, Authentication Services”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Analyst Access control, administration & portability
• The Data Analyst European sovereignty
• The Finance Controller Access control, administration & portability
• The Finance Controller European sovereignty
• The IT Administrator Access control, administration & portability
• The IT Administrator European sovereignty
• The Managing Director Access control, administration & portability
• The Managing Director European sovereignty
• The SaaS Product Lead Access control, administration & portability
• The SaaS Product Lead European sovereignty
• The Skeptic Access control, administration & portability
• The Skeptic European sovereignty