Data Processing Agreement

Scope

This Data Processing Agreement (“DPA”) applies when you (the “Customer”) use Verifagent to process personal data contained in monitor configurations, ping metadata, incidents or notification channels, and Verifagent acts as processor.

Processor: [[À COMPLÉTER : raison sociale / identité de l'éditeur]] ([[À COMPLÉTER : forme juridique]]), [[À COMPLÉTER : adresse du siège social]].

Roles

Customer is controller (or processor acting for a third-party controller) of Customer Data uploaded or transmitted through the service.

Verifagent is processor for Customer Data and remains independent controller for account credentials, product telemetry necessary to operate the SaaS, and billing records.

Instructions

Verifagent processes Customer Data only to provide the monitoring service, send notifications you configure, secure the platform, and comply with law.

Security

Verifagent implements appropriate technical and organizational measures including access control, encryption in transit, password hashing via Supabase Auth, and isolation of customer organizations through application controls.

Subprocessors

Customer authorizes the subprocessors listed in the Privacy policy (Supabase, Vercel, Resend, Stripe, cron-job.org) for the stated purposes.

Assistance

Taking into account the nature of processing, Verifagent will assist Customer with data subject requests, security incidents affecting Customer Data, and reasonable DPIA assistance related to the service.

Verifagent will notify Customer without undue delay after becoming aware of a personal data breach affecting Customer Data.

Return and deletion

Upon account deletion or written request at end of service, Verifagent will delete Customer Data from active systems within a reasonable period, subject to legal retention and backup cycles described in the Privacy policy.

Order of precedence

If this DPA conflicts with the Terms for processing of Customer Data, this DPA prevails for that subject. Liability remains subject to the limitations in the Terms unless mandatory law provides otherwise.