Draft for legal review. This text is a starting point, not legal advice, and must be reviewed and approved by qualified counsel before launch.

Data processing agreement

For customers subject to GDPR or similar laws, Searchlark acts as a processor of personal data contained in the content you provide. A DPA based on the EU Standard Contractual Clauses will be offered here.

To be completed by counsel

• Subject matter, duration, nature and purpose of processing.
• Categories of data subjects and personal data.
• Sub-processor list (see the privacy policy) and change notification process.
• Security measures: encryption in transit and at rest, row-level access control, encrypted secrets, least-privilege service keys.
• International transfer mechanism and data location options.