Summary
Our standard Data Processing Addendum (DPA) for Enterprise customers and customers serving EU/UK buyers.
01
Roles
You are the Data Controller, Garment SME is the Data Processor.
02
Sub-processors
AWS (Mumbai), Razorpay, SendGrid, Segment. Full list at /sub-processors.
03
SCCs
EU Standard Contractual Clauses (2021) signed for any data crossing borders.
04
Audits
SOC 2 Type II report available under NDA. On-site audit clause for Enterprise.
05
Breach notification
Within 72 hours, with impact and mitigation steps.
06
Term
For the duration of your subscription, plus 90-day data return window.