Data processing agreement (dpa) — found from the homepage — Akitra

Cited by

Facts read from this source

• DPA exists Report an error

  “Data Processing Addendum Last Updated: July 20 , 2025”

• DPA part of agreement Report an error

  “This Data Processing Addendum, including its schedules and the Standard Contractual Clauses (collectively, the “DPA”), forms part of the Subscription Agreement available at https://akitra.com/terms”

• UK addendum Report an error

  “In relation to Customer Data that is protected by the UK GDPR, the SCCs: (i) shall apply as completed in accordance with sub-paragraphs (A) and (B) above; and (ii) shall be deemed amended as specified by the UK Addendum attached as Schedule 4”

• Swiss transfers Report an error

  “In relation to Customer Data that is protected by the Swiss DPA, the SCCs as implemented under sub-paragraphs (A) and (B) above will apply with the following modifications”

• CCPA Report an error

  “To the extent the Customer Data is subject to the CCPA, the parties agree that Customer is a business and that it appoints Akitra as its service provider to process Customer Data”

• SOC 2 ISO 27001 Report an error

  “Akitra is SOC 2 and ISO 27001 compliant and, as a result, has processes in place designed to ensure confidentiality, integrity and availability of its systems for the benefit of customers.”

• Encryption Report an error

  “Akitra uses encryption at rest and encryption in transit for the protection of personal data”

• External audits annual Report an error

  “Akitra performs internal audits and external audits at least annually to ensure the effectiveness of technical and organizational measures.”

• Provider region Report an error

  “Akitra’s services and data are hosted in AWS’ facilities in the USA and protected by AWS in accordance with their security protocols.”

• Processing locations worldwide Report an error

  “Akitra and its Sub-processors may transfer (including conduct Restricted Transfers) and process Customer Data to and in the United States and anywhere else in the world where Akitra, its Affiliates or its Sub-processors maintain data processing operations”

• List URL Report an error

  “The Sub-processors engaged by Akitra depend on the Services purchased by Customer and are made available at Akitra’s website at www.akitra.com/subprocessors (“Sub-processor List”).”

• Objection right Report an error

  “Customer may object in writing to Akitra’s appointment of a new Sub-processor on reasonable grounds relating to data protection”

• Privacy contact Report an error

  “Contact Person’s Name, position and contact details: Privacy Team, privacy@Akitra.com”

• Security incident notification Report an error

  “Akitra will notify Customer without undue delay of any Information Security Incident of which Akitra becomes aware.”

• Security audit requests Report an error

  “On written request from Customer, Akitra shall provide written responses, which may include audit report summaries or extracts to all reasonable requests for information made by Customer related to its processing of Customer Data necessary to confirm Akitra’s compliance with this DPA, provided that Customer shall not exercise this right more than once in any 12-month rolling period.”

• DPA assistance Report an error

  “Akitra shall provide reasonably requested information regarding Akitra processing of Customer Data under the Agreement to enable the Customer to carry out data protection impact assessments or prior consultations with supervisory authorities as required by law.”

• Retention limit Report an error

  “Akitra only retains data for as long you are a customer and will remove such data upon request.”

• Backup practices Report an error

  “Akitra performs routine backups and retains such backups for a necessary period of time to ensure restoration and access, if relevant.”

• Data subject request assistance Report an error

  “Akitra shall, at Customer’s expense and taking into account the nature of the processing, provide reasonable cooperation to assist Customer to respond to any requests from individuals or applicable data protection authorities relating to the processing of Customer Data”

• Prohibited sensitive data Report an error

  “Customer Data does not and will not, without Akitra’s prior written consent, contain any social security numbers or other government-issued identification numbers, protected health information subject to the Health Insurance Portability and Accountability Act (HIPAA)”

• Aggregate rights Report an error

  “Customer acknowledges that Akitra and its Affiliates shall have a right to collect and create anonymized, aggregate and/or de-identified information (as defined by Applicable Data Protection Law) for its own legitimate business purposes.”

• Reseller DPA invalid Report an error

  “If the Customer entity signing the DPA is not a party to an Order Form nor an Agreement directly with Akitra, but is a customer indirectly via an authorized reseller or partner of Akitra services, this DPA is not valid and is not legally binding.”

• Login google workspace Report an error

  “Customers may login via Google Workspace and are therefore responsible for such user identification and authorization.”

• Categories of personal data Report an error

  “Name, Username, Email address, Job Title, Employment Status Organization Name, Online identifiers such as IP addresses, Device IDs, Device operating system, version, and characteristics (e.g. whether a screen lock, encryption or anti-virus is enabled), background check verification records (at discretion of Controller), security training records, Geolocation data (based on IP address) and any other personal data submitted to the Services as part of Customer Data.”

• Scc governing law Report an error

  “in Clause 17, Option 1 will apply, and the SCCs will be governed by the law of the EU Member State in which the data exporter is established and if no such law Ireland law;”

4 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The CISO Integrations & automation
• The CISO European sovereignty
• The GRC Consultant Integrations & automation
• The GRC Consultant European sovereignty
• The Evidence Integrator Integrations & automation
• The Evidence Integrator European sovereignty
• The Drafted IT Officer Integrations & automation
• The Drafted IT Officer European sovereignty
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Skeptic Integrations & automation
• The Skeptic European sovereignty