Legal
Data Processing Addendum
For customers who need a DPA to process personal data under GDPR and similar laws.
Last updated 2026-05-30
Roles
You are the controller of respondent data; we act as processor on your documented instructions.
Subprocessors
Current subprocessors and regions are listed on the Security page and updated as they change.
Security
We maintain technical and organizational measures appropriate to the risk, including encryption and access control.
Requesting the DPA
Download the signed DPA or contact security to complete a review.