Data Processing Addendum

Important notice

This is placeholder legal content for launch preparation. Have qualified legal counsel review and approve all policies before commercial launch.

Scope

This DPA applies when PassWhy processes personal data on behalf of a business customer as a processor under GDPR or similar laws.

Contact sales@passwhy.com to execute a signed DPA for your organization.

Processing details

Subject matter: credential and secret management platform services.

Duration: term of the subscription agreement.

Categories of data: account, vault metadata, encrypted secrets and audit logs as configured by the customer.

Security & sub-processors

PassWhy implements technical and organizational measures including encryption, access controls and audit logging.

A current sub-processor list is available on request.