Legal · Last reviewed: 2026-06

Data Processing Agreement

Scope

Where CYRKIL processes personal data on a customer’s behalf as part of the platform, that processing is governed by a Data Processing Agreement (DPA) executed alongside the commercial agreement, consistent with GDPR Article 28.

What the DPA covers

The DPA sets out the subject matter, duration, nature and purpose of processing, the categories of data and data subjects involved, and CYRKIL’s obligations and rights as processor, including sub-processing, security measures, breach notification and audit rights.

Subprocessors

Every subprocessor CYRKIL uses to deliver the platform is listed on the public subprocessor register.

View the register
Request the full DPA

The complete, signable DPA is provided as part of contracting — request a copy through Sales.

Contact Sales

Need a signed DPA?