Legal document
Bobyard Data Processing Addendum
A shareable DPA for customers reviewing Bobyard's data processing terms, security commitments, subprocessors, and international transfer mechanisms.
Version
May 15, 2026
Company
Bobyard, Inc.
Coverage
DPA, SCCs, UK GDPR, CCPA
At a glance
Built to support customer privacy and security review.
Main DPA
Defines processing scope, customer instructions, security obligations, audit support, data requests, subprocessors, deletion, and liability alignment.
Schedule 1
Applies the EU Standard Contractual Clauses for processing subject to European Data Protection Laws.
Schedule 2
Contains Annex I through III, including transfer details, technical and organizational measures, and authorized subprocessors.
Schedules 3 and 4
Adds UK transfer mechanisms and United States privacy terms, including CCPA service provider commitments.
Security measures
The DPA includes technical and organizational safeguards.
- Authenticated application access with role-based permissions
- Infrastructure account controls and MFA for critical systems
- HTTPS/TLS for internet-facing application traffic
- Production secrets and service credentials managed through environment-based configuration
- Logging, audit trails, and change tracking for monitoring and investigation
- Backup, remote storage, and disaster recovery measures supported by cloud infrastructure
Subprocessors
Authorized service providers.
The DPA authorizes these subprocessors to process personal data for the listed functions.
Amazon Web Services
Cloud infrastructure, object storage, compute, networking, and related hosting
United States
Heroku / Salesforce
Current or transitional application hosting, database / platform services
United States
Redis provider
Cache, queue, Celery broker / result backend, websocket channel layer
United States
Stripe
Payment processing and subscription billing
United States / global
HubSpot
CRM, customer communications, sales / support operations
United States / global
Mixpanel
Product analytics
United States / global
Microsoft Azure AI Document Intelligence
Document extraction / document AI processing
United States
Google Cloud / Vertex AI
ML inference and AI processing
United States
Vexcel
Imagery / geospatial data services
United States
| Subprocessor | Function | Location |
|---|---|---|
| Amazon Web Services | Cloud infrastructure, object storage, compute, networking, and related hosting | United States |
| Heroku / Salesforce | Current or transitional application hosting, database / platform services | United States |
| Redis provider | Cache, queue, Celery broker / result backend, websocket channel layer | United States |
| Stripe | Payment processing and subscription billing | United States / global |
| HubSpot | CRM, customer communications, sales / support operations | United States / global |
| Mixpanel | Product analytics | United States / global |
| Microsoft Azure AI Document Intelligence | Document extraction / document AI processing | United States |
| Google Cloud / Vertex AI | ML inference and AI processing | United States |
| Vexcel | Imagery / geospatial data services | United States |
Ready for customer review.
Download the complete Word document to review, complete customer details, and execute with the applicable agreement.