Data Processing Agreement.

We provide a ready-made standard DPA. If your company has its own template, we accept it after a technical review.

01 · ROLES

FabbricaAnalitica is an independent controller for the activities of observing and qualifying data. It is a data processor (art. 28 GDPR) for processing carried out on the client's behalf under a custom engagement.

02 · SUB-PROCESSORS

Full list in the DPA. All EU. Changes notified 30 days in advance.

03 · TECHNICAL MEASURES

Encryption at-rest and in-transit. Per-record audit-trail. Operator logging. 72h data-breach procedure.

04 · INSTRUCTIONS & AUDIT

The client provides documented instructions. Right to an annual or event-based audit. We provide compliance reports on request.