Data processing agreement (dpa) — Hyperping

Cited by

Facts read from this source

• Entity Report an error

  “between Hyperping SAS ("Hyperping", "we", "us", or "our") and the Customer”

• DPA last updated Report an error

  “Last updated: February 19, 2026”

• DPA precedence Report an error

  “In the event of any conflict between this DPA and the Agreement, the terms of this DPA shall prevail with respect to the processing of Personal Data.”

• DPA laws covered Report an error

  “including the EU General Data Protection Regulation (GDPR), UK GDPR, Swiss Federal Data Protection Act, California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy regulations”

• Roles Report an error

  “The Customer acts as the Data Controller (or "Business" under CCPA), and Hyperping acts as the Data Processor (or "Service Provider" under CCPA).”

• Never sell data Report an error

  “Never sell Personal Data or use it for purposes other than providing the Services”

• List URL Report an error

  “The current list is also available at hyperping.com/subprocessors.”

• Change notice days Report an error

  “Hyperping will provide at least 14 days' advance notice of changes to the Sub-processor list. The Customer may object in writing within 7 days on reasonable data protection grounds.”

• Objection remedy Report an error

  “If no resolution is reached, Customer may terminate the affected services as its sole remedy.”

• Data subject requests Report an error

  “If Hyperping receives a Data Subject request, it will redirect the individual to the Customer or forward the request. Hyperping will not independently respond to Data Subject requests.”

• Data subject request tools Report an error

  “Hyperping provides tools (dashboard features for data export and deletion) to assist.”

• Encryption Report an error

  “Encryption: Data encrypted in transit (HTTPS/TLS 1.2+) and at rest (LUKS, AES-256)”

• Infrastructure certifications Report an error

  “Infrastructure providers hold SOC 2 and ISO 27001 certifications.”

• Security access controls Report an error

  “Access Controls: Role-based access, multi-factor authentication, regular access reviews”

• Security URL Report an error

  “Details are available at hyperping.com/security.”

• Breach notification Report an error

  “Hyperping will notify the Customer without undue delay upon becoming aware of a Personal Data Breach”

• Audit frequency Report an error

  “Audits require at least 14 days' written notice, must be conducted during business hours without unreasonable disruption, and are limited to once per 12-month period (unless required by a supervisory authority or following a significant breach).”

• Audit reports Report an error

  “Hyperping may provide third-party certifications, audit reports, or penetration test summaries to satisfy audit requests.”

• Audit costs Report an error

  “The Customer bears its own audit costs plus reasonable costs incurred by Hyperping.”

• Deletion window Report an error

  “Upon termination of the Agreement, Hyperping will, at Customer's choice, return or delete all Customer Personal Data within 30 days, except where retention is required by law.”

• Dashboard deletion Report an error

  “During the term, Customer can delete data via the dashboard at any time (monitors, incidents, subscribers, etc.).”

• Backup retention Report an error

  “daily backups of the main database are kept for 7 days, encrypted at rest by the hosting provider, and there are no weekly or monthly backups, so data deleted from the live database leaves the backups within 7 days.”

• Deletion confirmation Report an error

  “Upon request, Hyperping will confirm in writing that deletion has been completed.”

• Primary storage Report an error

  “Customer Personal Data is primarily stored in the EU (Frankfurt, Germany). Transient monitoring data may be processed globally at probe servers, but primary storage remains in the EU.”

• Transfer mechanisms Report an error

  “For transfers from the EEA, UK, or Switzerland to countries without an adequacy decision, the parties rely on: (a) EU Standard Contractual Clauses (SCCs); (b) the EU-US Data Privacy Framework where applicable; or (c) other legally recognized mechanisms.”

• Governing law Report an error

  “This DPA is governed by the laws of France. Disputes are subject to the exclusive jurisdiction of the courts of Paris, France.”

• DPA changes Report an error

  “Hyperping may update this DPA with notice to the Customer. Material changes provide an opportunity to object or terminate.”

• Services Report an error

  “"Services" means the Hyperping services (uptime monitoring, status pages, incident alerting, on-call management, and related offerings)”

• Special categories Report an error

  “Hyperping does not require or intend to collect special categories of personal data (health, race, political opinions, etc.) or data about children under 16.”

• Digitalocean Report an error

  “DigitalOcean, LLC Primary cloud hosting, databases, and object storage EU (Frankfurt, Germany)”

• Aws Report an error

  “Amazon Web Services, Inc. Monitoring infrastructure, S3 storage, compute Global (primary EU and US)”

• Scaleway Report an error

  “Scaleway SAS EU-based monitoring infrastructure EU (Paris/Amsterdam)”

• Vercel Report an error

  “Vercel, Inc. Status page hosting and marketing website Global (primary US and EU)”

• Cloudflare Report an error

  “Cloudflare, Inc. CDN, DDoS protection, SSL/TLS management Global”

• Stripe Report an error

  “Stripe, Inc. Payment processing and subscription billing United States (PCI-DSS Level 1)”

• Twilio Report an error

  “Twilio, Inc. SMS and phone call alert delivery United States (global routing)”

• Sendgrid Report an error

  “Twilio SendGrid Email delivery for alerts and notifications United States (global delivery)”

• Google Report an error

  “Google LLC Single Sign-On (OAuth) authentication United States (global)”

• Workos Report an error

  “WorkOS, Inc. Enterprise SSO (SAML, Okta, Azure AD) United States”

• Segment Report an error

  “Segment (Twilio Segment) Product analytics and event tracking United States”

• Sentry Report an error

  “Sentry (Functional Software, Inc.) Error tracking and performance monitoring United States”

• Address Report an error

  “Hyperping SAS 50 Avenue des Champs-Élysées, 75008 Paris, France hello@hyperping.io”

• SSO security features Report an error

  “The Customer is responsible for securing their own account credentials, API keys, and configurations, and for using available security features (SSO, access roles, etc.).”

Scores citing this record

• The Agency Developer API, monitoring as code & team administration
• The Agency Developer European sovereignty
• The Customer Support Lead Status pages & incident communication
• The Customer Support Lead European sovereignty
• The E-Commerce Operations Manager API, monitoring as code & team administration
• The E-Commerce Operations Manager European sovereignty
• The SaaS Platform Engineer Status pages & incident communication
• The SaaS Platform Engineer European sovereignty
• The Information Security Officer Status pages & incident communication
• The Information Security Officer API, monitoring as code & team administration
• The Information Security Officer European sovereignty
• The Skeptic Status pages & incident communication
• The Skeptic European sovereignty