Legal

Data Processing Addendum

Last updated: April 2026 — placeholder content. Counter-signed DPAs available on request.

Quivv's Data Processing Addendum (DPA) governs the processing of personal data on behalf of customers under GDPR, UK GDPR, and equivalent laws. The DPA includes the EU Standard Contractual Clauses where required.

What the DPA covers

  • Roles and responsibilities (controller / processor)
  • Sub-processor authorization and notification
  • Security measures (Annex II)
  • Data subject rights and breach notification
  • International data transfers and SCCs
  • Audit rights

Sub-processors

Our current sub-processor list and their roles are published on our Trust Center.

How to sign

Customers and prospects can request a counter-signed DPA by emailing legal@quivv.ai. We typically return a counter-signed copy within two business days.

Request the DPA