What is a Data Processing Addendum (DPA)?

A Data Processing Addendum is a key document that the EU’s GDPR regulation requires. The GDPR compliance requires data controllers to sign a data processing agreement with any parties that act as data processors on their behalf. These requirements are laid out in Article 28(3) and (4) of Regulation (EU) 2016/679 and/or Article 29(3) and (4) of Regulation (EU) 2018/1725.

In the case of the Exoscale Cloud Platform, Exoscale may act as a processor depending on what data you as an Exoscale IaaS and PaaS user are processing on the platform, in which case you act as a controller of the data.

How to review our Data Processing Addendum (DPA)

You can find our DPA template which complements our Terms and Conditions.

Login to the Portal and select Organization in the main navigation on the left. You can find information under the Legal section.

Organization menu: Legal

Here you find our Data Processing Addendum (or DPA) at the bottom:

Review DPA

click on Review and Accept. A window with the DPA will appear for you to review. You can click on Confirm to accept.

DPA Window

The DPA is now signed with a timestamp and archived. You can download a PDF copy for your records.