Data processing agreement (dpa) — Proton for Business

Cited by

Facts read from this source

• Entity Report an error

  “Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland, Company identification number CHE-354.686.492”

• Last modified Report an error

  “Last modified: February 10, 2026”

• GDPR Report an error

  “complies with the requirements of the current legal framework in relation to data processing and with the Regulation (EU) 2016/679”

• Governing law Report an error

  “This Agreement shall be governed by Swiss law”

• Audit rights Report an error

  “shall allow for and contribute to audits, including inspections, by Company or an auditor mandated by Company in relation to the Processing of the Company Personal Data by the Contracted Processors”

• Audit limitations Report an error

  “Company shall not exercise its audit rights more than once per calendar year except following a Personal Data Breach or an instruction by a regulatory authority. Company shall give Processor at least sixty (60) days prior written notice of its intention to audit”

• Dpia assistance Report an error

  “Processor shall provide reasonable assistance to Company with any data protection impact assessments, and prior consultations with Supervising Authorities”

• Data transfer scope Report an error

  “the Processor shall only transfer or authorize the transfer of Data to countries within Switzerland, the EU and/or countries subject to an adequacy decision, as provided for in art. 45 GDPR and art. 16 Swiss FADP”

• Deletion on cessation Report an error

  “In case of cessation of any Service involving the Processing of Company Personal Data, the Processor shall delete all Company Personal Data to the extent permitted by applicable laws”

• General authorization Report an error

  “the Company grants general authorization to the Processor to engage Subprocessors and disclose or transfer Company Personal Data to them”

• Flow down Report an error

  “Processor ensures that Subprocessors are subject to an agreement with Processor no less restrictive and protective than the present Agreement”

• Security article32 Report an error

  “In accordance with Article 32 (1) of the GDPR, the Processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk”

• Personnel confidentiality Report an error

  “ensuring that all such individuals are subject to confidentiality undertakings or professional or statutory obligations of confidentiality”

• Notices email Report an error

  “Processor shall be notified by email sent to the address: legal@proton.me”

• Language precedence Report an error

  “In case of discrepancy between the English version of these Terms and any translated version, the English version shall prevail.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Migration, open standards & exit
• The Data Protection Officer European sovereignty
• The IT Administrator Migration, open standards & exit
• The IT Administrator European sovereignty
• The IT Service Provider Migration, open standards & exit
• The IT Service Provider European sovereignty
• The Public Sector IT Lead Migration, open standards & exit
• The Public Sector IT Lead European sovereignty
• The Skeptic Migration, open standards & exit
• The Skeptic European sovereignty
• The Small Firm Owner Migration, open standards & exit
• The Small Firm Owner European sovereignty