Draft · pending counsel review

Data Processing Agreement (DPA)

This text is a working draft. The version that governs your contract is the version in your order form or in the checkout flow at the time of purchase.

Scope

Afiant acts as processor for the personal data Customer submits to the Service (the “Customer Data”), strictly to produce reports and to operate the agreed subscription. All processing takes place inside the European Union except where the Customer has consented otherwise in writing.

Subprocessors

Supabase (DE) — database and storage. Stripe (IE) — payments. Resend (DE) — transactional email. Backblaze (NL) — archive on paid plans. Anthropic (EU endpoint where available) — AI matching. Customer is notified by email at least 14 days before any new subprocessor goes live and may object in writing.