Data Processing Agreement

DPA defines processing obligations for business customers.

Customer acts as controller. Trigvanta acts as processor.

We only process your data the way this agreement and your contract with us say we can.

See the Privacy Policy's data table for exactly what we collect and why.

Users and operators connected to customer workspaces.

Security, operations, compliance, and platform service delivery.

Access control, audit logging, encryption controls, and recovery controls.

See the Subprocessors page for the full, up-to-date list of who we work with and why.

Transfers are governed by configured legal mechanisms where required.

Rights requests are supported through privacy workflows.

Security incidents follow incident and notification procedures.

Data return/delete follows retention and legal requirements.

Processing and security activities are auditable.

legal@trigvanta.com