Legal document

Bobyard Data Processing Addendum

A shareable DPA for customers reviewing Bobyard's data processing terms, security commitments, subprocessors, and international transfer mechanisms.

Download DPA Contact legal

Version

Oct 14, 2026

Company

Bobyard, Inc.

Coverage

DPA, SCCs, UK GDPR, CCPA

At a glance

Built to support customer privacy and security review.

Main DPA

Defines processing scope, customer instructions, security obligations, audit support, data requests, subprocessors, deletion, and liability alignment.

Schedule 1

Applies the EU Standard Contractual Clauses for processing subject to European Data Protection Laws.

Schedule 2

Contains Annex I through III, including transfer details, technical and organizational measures, and authorized subprocessors.

Schedules 3 and 4

Adds UK transfer mechanisms and United States privacy terms, including CCPA service provider commitments.

Security measures

The DPA includes technical and organizational safeguards.

Authenticated application access with role-based permissions
Infrastructure account controls and MFA for critical systems
HTTPS/TLS for internet-facing application traffic
Production secrets and service credentials managed through environment-based configuration
Logging, audit trails, and change tracking for monitoring and investigation
Backup, remote storage, and disaster recovery measures supported by cloud infrastructure