Legal · Last reviewed: 2026-06
Data Processing Agreement
Scope
Where CYRKIL processes personal data on a customer’s behalf as part of the platform, that processing is governed by a Data Processing Agreement (DPA) executed alongside the commercial agreement, consistent with GDPR Article 28.
What the DPA covers
The DPA sets out the subject matter, duration, nature and purpose of processing, the categories of data and data subjects involved, and CYRKIL’s obligations and rights as processor, including sub-processing, security measures, breach notification and audit rights.
Every subprocessor CYRKIL uses to deliver the platform is listed on the public subprocessor register.
View the registerThe complete, signable DPA is provided as part of contracting — request a copy through Sales.
Contact Sales