Skip to content
Vaam Docs

Data Processing Agreement

If you are looking for the full DPA that you enter into as a Vaam customer, it is available at the bottom of this page. The first section summarizes the agreement to make it easier to read.

The TLDR is for quick reference only. The full DPA contains important details and should be consulted for complete understanding and legal purposes.

Key points for customers

Section titled “Key points for customers”
  1. Instructions: You provide instructions for data processing. Vaam follows them unless they violate laws.
  2. Data Subject Rights: You are responsible for responding to data subject requests. Vaam assists within its capabilities.
  3. Security: Vaam implements appropriate security measures to protect your data.
  4. Subprocessors: Vaam may use subprocessors. Vaam notifies you of changes and gives you the right to object.
  5. Data Transfers: Vaam may transfer data outside the EU/EEA using appropriate safeguards.
  6. Audits: You can audit Vaam’s compliance once per year, at your expense.
  7. Data Breach: Vaam notifies you of any confirmed data breaches within 72 hours.
  8. Termination: Upon termination, Vaam returns or deletes your data as you instruct.

Key points for Vaam

Section titled “Key points for Vaam”
  1. Compliance: Vaam processes data in compliance with your instructions and applicable laws.
  2. Subprocessors: Vaam is responsible for its subprocessors’ compliance.
  3. Security: Vaam implements and maintains appropriate technical and organizational security measures.
  4. Assistance: Vaam assists with data subject requests, impact assessments, and audits within reason.
  5. Confidentiality: Vaam’s staff are bound by confidentiality obligations.
  6. Breach Notification: Vaam promptly notifies you of any confirmed data breaches.
  7. Liability: Vaam’s liability is limited to the amount you paid in the preceding 12 months.
  8. Data Retention: Vaam may retain data as required by law, even after termination.

Mutual obligations

Section titled “Mutual obligations”
  1. Cooperation: Both parties agree to cooperate on data protection matters.
  2. Compliance: Both parties commit to complying with applicable data protection laws.
  3. Amendments: Changes to the DPA must be made in writing and agreed by both parties.
  4. Confidentiality: Both parties agree to maintain the confidentiality of the agreement.

Full DPA

Section titled “Full DPA”

DPA.pdf