DPA
Data Processing Agreement
HyperContent provides a standard Data Processing Agreement (DPA) to customers who need one for GDPR compliance. The DPA incorporates the EU Standard Contractual Clauses and reflects the sub-processor list in our security overview.
How to request it
Email contact@podiumdigital.rs with your company's legal name, the workspace(s) it applies to, and any specific clause requests. We'll send you the current DPA as a signable PDF within two business days.
What it covers
- Roles and responsibilities (we act as processor; you remain the controller of content in your workspace).
- Sub-processors: Railway (application + database hosting), Cloudflare (R2 object storage, CDN), Google (Analytics — marketing site only, consent-gated, never workspace content), and — for accounts where you authorise it — Meta Platforms (Instagram, Facebook Pages, Threads publishing and analytics), X Corp (Twitter v2 API publishing), and TikTok (Content Posting API publishing).
- Security obligations consistent with what's documented on our security page.
- Data-subject rights handling and breach notification timelines.
- Standard Contractual Clauses for EU → non-EU transfers, where applicable.
If your legal team has specific additions or redlines, send them along with the request — we read everything and come back with a clean redline.