Data Processing Agreement
Data Processing Agreement
If your organisation needs a signed DPA in place, our standard agreement is below. It covers UK GDPR, EU GDPR and the appropriate Standard Contractual Clauses.
Last updated: 2026-04-19
Summary
- Fortoxa acts as a data processor for content you put into the platform.
- Fortoxa is a data controller for account, website and billing data we collect directly.
- Processing is carried out under Article 28 GDPR obligations.
- International transfers rely on UK and EU Standard Contractual Clauses.
- Our subprocessors are listed on the subprocessors page.
How to get a signed DPA
Business and Pro customers receive a signed, customer-addressed DPA on request. Email [email protected] with your entity name and registered address and we'll send the DPA for counter-signature.
Micro and Starter customers are covered by the standard DPA published here — no additional counter-signature required.
TODO — founder input required before launch
- Registered controller entity (Fortoxa Ltd, Companies House number, jurisdiction)
- DPO contact ([email protected]) or nominated representative
- Finalised DPA PDF linked here for download