Skip to content
Attesta
Current language: ENNederlands: NLDeutsch: DEFrançais: FREspañol: ES
Log inScan your site

Data Processing Agreement

Last updated: 18 July 2026

Where Attesta processes personal data on your behalf (Art. 28 GDPR), this Data Processing Agreement forms part of our terms — no signature ritual required, though we'll gladly countersign a copy for your records.

Subject matter & duration

Processing of the minimal personal data involved in operating your account and scanning the public sites you designate, for the duration of your subscription.

Our obligations as processor

  • Process personal data only on your documented instructions.
  • Ensure confidentiality commitments for all personnel.
  • Apply appropriate technical and organisational measures (encryption in transit and at rest, tenant isolation, least-privilege access).
  • Engage sub-processors only under equivalent terms, all within the EU; we notify you before changes.
  • Assist with data-subject requests and breach notification (without undue delay, at the latest within 48 hours of becoming aware).
  • Delete or return personal data at contract end.

Audit

We make available the information reasonably necessary to demonstrate compliance and allow audits, which for proportionality start from our written documentation.