Data Processing Agreement

Draft. Draft. The full agreement is available on request and will be published before online subscriptions open.

When we host or process data for you, we act as your processor under the GDPR. The Data Processing Agreement covers:

1. Subject and duration

Processing needed to deliver the services you subscribe to, for as long as the subscription runs.

2. Location

Processing takes place within the European Union.

3. Sub-processors

We use the providers listed on our providers page and announce changes in advance, so you can object.

4. Security

Access on a need-to-know basis, encryption in transit, infrastructure managed as code, and monitoring.

5. Data breaches

We inform you without undue delay after we become aware of a breach affecting your data.

6. End of the service

At the end of the subscription, we return or delete your data, as you choose.