Data processing agreement

We include a Data Processing Agreement (DPA) in all customer contracts. Our DPA is based on the CommonPaper DPA Standard Terms (Version 1.1), an open-source industry standard.

Key terms

  • Role: Leverdocs acts as a Processor (or Subprocessor) of Customer Personal Data
  • Security incident notification: Without undue delay, no later than 72 hours
  • International transfers: EU Standard Contractual Clauses (2021) and UK Addendum incorporated by reference where applicable
  • Audit rights: Customers may request a summary security report annually
  • Data deletion: Customers can delete their data at any time; remaining data returned or deleted after contract expiry

Australian compliance

Our DPA Cover Page includes obligations under Australian data protection law:

  • Privacy Act 1988 (Cth)
  • Australian Privacy Principles (APPs)
  • Notifiable Data Breaches scheme

Sub-processors

ProviderLocationPurpose
Amazon Web ServicesAustraliaCloud Services
GoogleGlobalArtificial Intelligence Services

Contact us

Your DPA is part of your Leverdocs agreement. For questions about data processing, contact us at privacy@leverdocs.com.