Data processing agreement

A DPA under Article 28 GDPR is available on request, before you send us anything.

If you are evaluating TrainTrace and need a data processing agreement in place first, ask and we will send one for review. We would rather sign before you upload an SOP than after.

Request the DPA

What it covers in practice

  • The documents you upload for a gap analysis, and who can read them.
  • Retention: uploads are deleted within 90 days, or sooner on request.
  • Sub-processors, including which of them are outside the EU.
  • What happens to your data if you walk away.

The current sub-processor list is in the privacy notice.