Data Processing Agreement (DPA)

How Our DPA Works

When you use the ProvenTen platform, we act as a Data Processor for any personal data processed on your behalf. To ensure a compliant and secure data processing environment, we offer a standardized Data Processing Agreement (DPA) that includes:

• Clear descriptions of the roles, responsibilities, and scope of data processing.
• Strict organizational and technical security measures (including tier-4 EU hosting and zero cross-border data transfers).
• Standard Contractual Clauses (SCCs) and EU Data Residency guarantees.
• Details on our vetted sub-processors and audit rights. Our authorized Sub-processors are listed in one central register at /sub-processors-info.

Sub-processors

ProvenTen engages third-party Sub-processors (e.g., cloud hosts, email providers, and infrastructure vendors) to deliver the platform. To avoid duplicate lists across legal documents, we maintain a single authoritative Sub-processor register at /sub-processors-info. When vendors change, that page is updated and enterprise customers are notified in accordance with the DPA.

Requesting a DPA

Our DPA is available upon request for customers and prospective clients during the onboarding or procurement process.

To request a copy of our DPA or to submit your organization's vendor assessment:

• Email: legal@proventen.com
• Subject: Data Processing Agreement Request
• Response Time: Our legal team typically responds within 5 business days.

Or contact sales:

Note: If you are an Enterprise customer requiring custom DPA terms or security exhibits, please reach out to your dedicated account manager or contact our sales team at sales@proventen.com.