Data Processing Agreement
If your organisation needs a signed DPA in place, our standard agreement is below. It covers UK GDPR, EU GDPR and the appropriate Standard Contractual Clauses.
Summary
- Fortoxa acts as a data processor for content you put into the platform.
- Fortoxa is a data controller for account, website and billing data we collect directly.
- Processing is carried out under Article 28 GDPR obligations.
- International transfers rely on UK and EU Standard Contractual Clauses.
- Our subprocessors are listed on the subprocessors page.
How to get a signed DPA
Business and Pro customers receive a signed, customer-addressed DPA on request. Email contact Fortoxawith your entity name and registered address and we'll send the DPA for counter-signature.
Micro and Starter customers are covered by the standard DPA published here — no additional counter-signature required.
Fortoxa provides data processing terms through official customer agreements and onboarding materials. For DPA requests, customers can contact Fortoxa through the standard contact channel.