Data Processing Agreement
Last updated: · Draft version: draft-2026-10-13.1
Template source: Common Paper DPA. Adapted excerpts, omissions and review notes; licensed under CC BY 4.0.
Agreement available on request
For a Data Processing Agreement, contact privacy@observagent.cloud. The downloadable standard form is a review template and is not a signed or effective agreement.
Download Common Paper DPA standard terms and draft cover checklist
Processing schedule
Proposed scope: provision of Observagent telemetry monitoring for Canadian and US business customers. Potential data includes customer-submitted telemetry and associated account/support records.
[TODO: Complete the parties, roles, processing subject matter/duration, data subjects, data categories, instructions, security measures, subprocessors, locations, breach process, assistance, audits, retention and return/deletion schedule. Obtain approval before entering an agreement.]
Potential processors
Detected services are listed below. Contracting entities, processing locations and production enablement remain subject to verification. A detected integration is not proof that it receives customer data.
| Provider | Purpose | Status / locations |
|---|---|---|
| Stripe | Hosted checkout, subscription billing and refunds | Detected in billing code [TODO: verify processing locations and contracting entity] |
| Amazon Web Services | Hosting, tenant infrastructure, backups and SES transactional email | Detected in infrastructure and email code [TODO: verify all account, telemetry, backup and email regions] |
| Brevo | Newsletter subscription and marketing email | Detected in newsletter code [TODO: verify processing locations and contracting entity] |
| Google reCAPTCHA | Newsletter form abuse prevention | Detected in form code; cookie classification pending review [TODO: verify processing locations and contractual role] |
| Microsoft Entra ID | Single sign-on authentication | Detected in configured SSO issuer [TODO: verify configured tenant and processing locations] |
| Google Firebase / Firestore | Optional telemetry backup | Conditional code path; production use not confirmed [TODO: confirm whether enabled; remove if unused] |
[TODO: Verify signed processor agreements, applicable safeguards, locations and notification procedures.]