Data processing agreement

[to complete]

This page is a placeholder. It is excluded from search engines and from the sitemap, and it will be replaced before TOVIA accepts its first customer.

Blocked on:a lawyer's review, and the first customer who loads data. A weak DPA blocks more deals than a weak set of terms.

When it exists this will be a directly downloadable document, not a form to request one, and it will be published alongside the full sub-processor list. Publishing that list is a market expectation rather than a legal requirement — and it is free, so there is no reason not to.

The Art. 28(3) contents are not negotiable and will be there: documented-instructions-only processing, confidentiality, Art. 32 security, sub-processor conditions with prior authorisation and a right to object, assistance with data-subject requests and with Arts. 32–36, deletion or return at the end of the service, and information and audit rights.

Until then, anything you would have asked this page —hello@toviahq.com.