Data Processing Addendum

If you are an organization subject to GDPR, UK GDPR, or similar law, Ariesnet acts as your processor for the personal data inside Customer Data, and you are the controller. Our full DPA is available on request; it includes the EU Standard Contractual Clauses where required.

What we commit to in the DPA. Process personal data only on your instructions and to provide the service · keep it confidential · apply the technical and organisational measures in our Security Overview · notify you of a personal-data breach without undue delay · help you respond to data-subject requests · delete or return personal data at the end of the contract · use only the subprocessors listed below and give notice before adding one · allow audits on reasonable notice.

Where data is processed. West US

Subprocessors: Stripe (payment processing),Azure (hosting provider),Google and Microsoft (authentication provider, and email provider),PostHog (analytics),Brevo (CRM)

Request the DPA: legal@aramai.net with your organization name and the plan you are on. Team and Enterprise customers can sign it; Builder accounts are covered by the Privacy Policy.