Skip to content

Data Processing Addendum

Outline of the terms under which rpling processes personal data on behalf of customers.

Draft, pending legal review

Last updated 2026-10-26

Scope

This addendum applies where rpling processes personal data on your behalf as a processor in providing the Service.

Instructions

We process personal data only on your documented instructions, which are these terms, your configuration of the Service, and your written requests.

Security

Row-level access control isolates every workspace. Integration tokens are encrypted at rest. Access to production systems is limited and logged.

Sub-processors

The sub-processors listed in our Privacy Policy are authorised. We will give notice of new sub-processors and an opportunity to object.

International transfers

Where personal data leaves the EEA or UK, transfers rely on the applicable Standard Contractual Clauses. [NEEDS INPUT: confirm hosting regions].

Assistance, deletion and audits

We assist with data subject requests and impact assessments, delete or return data at the end of the Service, and provide information reasonably needed to demonstrate compliance.