Data processing agreement (dpa) — found from the homepage — Maxio

Cited by

Facts read from this source

• Entity Report an error

  “Maxio LLC, a Delaware limited liability company (together with its Affiliates, including, but not limited to, Chargify, LLC and SaaSOptics, LLC, collectively, “Maxio”)”

• Last updated Report an error

  “Last updated: December 3, 2025”

• Laws covered Report an error

  “Applicable Data Protection Laws means European Data Protection Laws, the UK GDPR and the US Data Protection Laws”

• Breach notification hours Report an error

  “notify Client of the Information Security Incident without undue delay after becoming aware of the Information Security Incident and in any event within forty-eight (48) hours”

• List URL Report an error

  “Information about Subprocessors, including their functions and locations, is available at https://www.maxio.com/subprocessors”

• Audit frequency Report an error

  “Maxio shall have no obligation to provide such information on more than annual basis, unless an Information Security Incident occurs”

• Audit notice days Report an error

  “Client may contact Maxio to request an on-site audit with at least sixty (60) days prior notice”

• Retention exception Report an error

  “Maxio may retain one copy of Client Data as necessary to comply with any of Maxio’s legal, regulatory, judicial, audit or internal compliance requirements”

• Supervisory authority Report an error

  “The competent supervisory authority for Maxio is the Data Protection Commission of Ireland in accordance with Clause 13 of the EU Standard Contractual Clauses.”

• Privacy contact Report an error

  “The Maxio privacy contact can be contacted at privacy@maxio.com.”

• Scc governing law Report an error

  “in Clause 17 of the EU Standard Contractual Clauses, the parties agree that the EU Standard Contractual Clauses shall be governed by the laws of Ireland. With regards to Clause 18(b) of the EU Standard Contractual Clauses, the parties agree that the courts of Dublin, Ireland, shall resolve any dispute.”

• No HIPAA phi Report an error

  “Personal Data does not and will not contain any protected health information subject to the Health Insurance Portability and Accountability Act (HIPAA), any biometric information, or any payment card information subject to the Payment Card Industry Data Security Standard”

• ISO 27001 Report an error

  “Maxio shall comply with the ISO 27001 standard and shall audit its compliance with ISO 27001 on at least an annual basis.”

• Pci dss chargify Report an error

  “Chargify shall comply with the PCI DSS, version 3.2.1, Level 1. Chargify shall obtain an annual audit of its compliance with PCI DSS by a Qualified Security Assessor Company and, on Client’s request, shall provide its most recent PCI DSS audit report.”

• Pci dss saasoptics Report an error

  “SaaSoptics shall comply with the PCI DSS, version 3.2.1. Maxio shall perform annual audits of its compliance with PCI DSS using the PCI DSS Self-Assessment Questionnaire (SAQ)”

• Government id storage forbidden Report an error

  “There are no functions in Maxio services that capture government issued personal information such as driver’s license, passport number, or social security number and storage of such information by a customer is expressly forbidden.”

• Payment data handling Report an error

  “While Maxio may have access to Cardholder data, banking, address information and any information related to payment methods (collectively, “Payment Data”), Maxio does not generally process Payment Data, and all Payment Data is stored in compliance with the Payment Card Industry Data Security Standard.”

• No sale of pi Report an error

  “the exchange of Personal Information between the Parties does not constitute a sale of Personal Information under any US Data Protection Laws”

• Analytics use Report an error

  “Maxio may create and derive from processing under the Agreement anonymized and/or aggregated data that does not identify Client or any data subject and use such data to improve Maxio’s products and services”

• Background checks Report an error

  “All personnel with access to Data or systems processing Data undergo background checks that cover criminal, financial and work history.”

• Security officer Report an error

  “Maxio has a designated security officer who is responsible for the development, implementation, and maintenance of the ISMS.”

• ISMS Report an error

  “Maxio has implemented Information Security Management Systems policies and controls (“ISMS“) with physical, technical, and organizational measures and safeguards designed to protect data”

• Roles Report an error

  “(a) Maxio is a processor or sub-processor of that Personal Data under European Data Protection Laws; (b) Client is a controller or processor of that Personal Data under European Data Protection Laws”

• Records log Report an error

  “Maxio will maintain a written log of all processing of Personal Data performed on Client’s behalf as required by Applicable Data Protection Law. The written log, whose copy will be provided by Maxio at Client’s request”

7 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Billing Engineer European sovereignty
• The Billing Engineer Pricing transparency
• The Finance Lead European sovereignty
• The Finance Lead Pricing transparency
• The SaaS Founder European sovereignty
• The SaaS Founder Pricing transparency
• The Service-Business Owner European sovereignty
• The Service-Business Owner Pricing transparency
• The Skeptic European sovereignty
• The Skeptic Pricing transparency
• The Tax Adviser European sovereignty
• The Tax Adviser Pricing transparency