Compliance & data protection
Data management / DPA
A clear commitment to protecting your data.SIGNESTO’s Data Processing Agreement (DPA) governs the processing of your personal data in accordance with the GDPR and security best practices.
- GDPR compliant
- Secure and transparent
- Quick setup
- Support from our experts
Key points of the SIGNESTO DPA
A clear, complete contractual framework for processing your data with confidence.
Controller
You remain the controller of your personal data.
Processor
SIGNESTO acts as processor, on your instructions and only for the defined purposes.
Security measures
Appropriate technical and organizational measures to ensure the confidentiality, integrity and availability of your data.
Sub-processors
A transparent list of our sub-processors, with a contractual data protection obligation.
International transfers
Secure, safeguarded transfers outside the EU, in accordance with the GDPR and standard contractual clauses.
What is a DPA?
The Data Processing Agreement (DPA) is a contract that governs the processing of personal data when a provider acts on behalf of a client. It ensures that data is processed in accordance with the General Data Protection Regulation (GDPR) and sets out the rights and obligations of each party.
Learn more about the DPA
SIGNESTO’s commitments
Our DPA covers all the essential aspects for compliant collaboration.
Purposes and instructions
We process data only on your documented instructions and for the purposes defined in the contract.
Confidentiality
All our teams are bound by a strict confidentiality obligation.
Sub-processors
Our sub-processors are carefully selected and subject to the same data protection obligations.
Technical and organizational measures
We implement appropriate security measures to protect your data.
International transfers
Transfers outside the EEA are governed by appropriate safeguards (standard contractual clauses, etc.).
Assistance and exercise of rights
We assist you in exercising the rights of data subjects and in responding to requests from supervisory authorities.
Our sub-processors
| Name | Country | Purpose | Status |
|---|---|---|---|
| OVHcloud | France | Hosting and backups | Active |
| Cloudflare | United States | Content delivery and site protection | Active |
| Stripe | Ireland | Payments | Active |
| Resend | United States | Email delivery | Active |
Full transparency about our sub-processors
Find the complete, up-to-date list of our sub-processors, their locations and the purpose of their services. All our partners are subject to strict contractual data protection obligations.
How do I request DPA signature?
A simple, fast process to formalize our collaboration.
1. Submit your request
From your account or via our form.
2. Receive the DPA
Our team sends you the DPA and its up-to-date annexes.
3. Sign online
Sign electronically in a few clicks.
4. All done!
You receive the signed copy and archiving is automatic.
Resources to download
All the documents you need for your compliance.
Frequently asked questions
Have a question? Here are answers to the most common ones.
A question about protecting your data? Contact our legal team.
- Fast response
- GDPR experts
- Personalized support