Data Processing Addendum (DPA)
This Data Processing Addendum governs the processing of Customer Personal Data in accordance with European (GDPR), UK, and international data protection regulations.
1. Roles and Scope of Processing
The Customer acts as the Data Controller and FolderBit acts as the Data Processor. FolderBit processes documents, metadata, and e-signature records strictly on the documented instructions of the Customer.
2. Technical and Organizational Measures (TOMs)
FolderBit implements strict technical safeguards including AES-256 encryption at rest, TLS 1.3 in transit, automated disk-shredding on ephemeral workers, and PostgreSQL Row-Level Security partitions between workspaces.
3. International Transfers and Subprocessors
Cross-border data transfers adhere to European Commission Standard Contractual Clauses (SCCs). FolderBit conducts thorough due diligence on all subprocessors and provides advance notification of infrastructure modifications.
4. Executing an Enterprise DPA
Organizations requiring a countersigned DPA for enterprise compliance can request a pre-signed PDF copy by contacting our legal team at legal@folderbit.app.