Data Processing Agreement
Last Updated: October 2023
1. Definitions
In this Data Processing Agreement, "Customer Data" means any personal data that VantaLabs processes on behalf of the Customer in the course of providing services.
2. Processing of Customer Data
VantaLabs shall only process Customer Data on behalf of and in accordance with the Customer's documented instructions. VantaLabs shall ensure that persons authorized to process the personal data have committed themselves to confidentiality.
3. Security Measures
Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of Processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, VantaLabs shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
4. Sub-processors
The Customer provides general authorization for VantaLabs to engage sub-processors to process personal data. VantaLabs shall inform the Customer of any intended changes concerning the addition or replacement of other sub-processors.