Data Processing Addendum

Who needs a DPA?

A Data Processing Addendum (DPA) may be required if your organisation is subject to the EU General Data Protection Regulation (GDPR), UK GDPR, or other data processing regulations that require a formal data processing agreement with service providers.

This includes businesses operating in the European Economic Area (EEA), the United Kingdom, or any other jurisdiction with equivalent data transfer requirements.

What our DPA covers

• Standard Contractual Clauses (SCCs) approved by the European Commission for EU data transfers.
• The UK International Data Transfer Addendum for UK data transfers.
• Details of data processing activities, purposes, and categories of personal data.
• Security obligations and subprocessor arrangements.
• Data subject rights and breach notification procedures.

How to request

Email support@invven.com with your organisation name and the jurisdiction(s) you require coverage for. We will respond within 2 business days.

EU, UK, and other regulated customers are encouraged to request a DPA before or at the time of signup.