This DPA supplements the Terms of Service and applies where CloudGenie processes personal data on your behalf under UK GDPR / EU GDPR.

Placeholder document. This page is a stub while we finalise the formal legal review. The final version will land before public launch. In the meantime, if you have specific compliance questions email hello@cloudgenie.co and we'll respond within one working day.

Roles

You are the Data Controller. CloudGenie is the Data Processor.

Scope

Personal data limited to end-user accounts, product telemetry, and any personal data your team uploads into workspaces.

Sub-processors

See Subprocessors for the current list. We provide 30-day notice before adding a new sub-processor with the right to object.

Data transfers

Primary hosting in AWS Singapore (ap-southeast-1). EU/UK data-residency add-on available on Enterprise.

Breach notification

Within 72 hours of confirmed breach, with impact assessment and mitigation plan.

Enterprise DPA

A signed, negotiable DPA is available for Enterprise customers on request.