For our EU and UK customers.
If your business handles personal data from people in the EU, UK, or Switzerland, you need a countersigned Data Processing Agreement with anyone who processes that data on your behalf. Orevlo is one of those processors, and we’ll sign one with you.
What’s in our DPA.
Our standard DPA reflects the actual data-handling commitments we already make in our Privacy Policy: actions taken only with your authorization, least-privilege access, encryption at rest and in transit, no training of AI models, deletion within 30 days of disconnect, no sale or sharing with advertisers, and a defined list of sub-processors with the right to object to new ones.
It incorporates the Standard Contractual Clauses adopted by the European Commission in Decision 2021/914 for transfers of personal data from the EEA to the United States. For UK transfers, it incorporates the UK International Data Transfer Addendum issued by the ICO.
How to get a copy.
Email security@orevlo.com with your company name, the email address of the person who should counter-sign, and the country your business is established in. We send a countersigned copy back within five business days. There’s no fee.
You don’t need to wait for the DPA to sign up or use Orevlo — the protections it formalizes apply to your account from the moment you connect anything.
What you’re responsible for.
You decide what personal data flows through your connected accounts (your inbox, your calendar, your bank, your accounting tools). As the controller of that data, you’re responsible for having a lawful basis to process it and for telling the people whose data it is what you do with it. Orevlo, as your processor, does what you’ve asked us to do — nothing more.
If you’re not in the EU or UK.
You probably don’t need a DPA, but if your contract or compliance review requires one anyway, the same email gets you the same document.
This page summarizes Orevlo’s DPA process; the signed agreement itself is the binding document. See also our Privacy Policy, Security, and Terms.