Data Processing Agreement (DPA)

If you are a business in the EU/EEA (or process personal data of EU residents), GDPR Article 28 requires a written Data Processing Agreement between you (the data controller) and any processor that handles personal data on your behalf.

Boei provides a comprehensive DPA included with every plan, at no extra cost.

What the DPA covers

The agreement documents:

  • The categories of personal data Boei processes on your behalf (visitor messages, contact info, lead data)
  • The purposes and duration of processing
  • The technical and organizational security measures in place
  • The current list of sub-processors (hosting, email delivery, AI model providers, analytics) and their geographic locations
  • Your rights to audit, terminate, and request data deletion
  • The procedure Boei follows in case of a data breach

How to get the DPA

Email support@boei.help with the subject "DPA request" and include your account email plus your company's legal name. We send back a counter-signed PDF you can keep on file.

If you need the DPA signed under a specific framework (e.g. your own template), include that template in your email. We will review and respond within a few business days.

Sub-processors

Sub-processors are third parties that process personal data on Boei's behalf to deliver the service (e.g. hosting providers, AI model providers). The current list is maintained in the DPA and is also available on request.

We notify customers of material changes to the sub-processor list with reasonable advance notice so you can object if needed.

Made with ProductLift