Data Processing Agreement (DPA)
Placeholder DPA request flow for FlowState Charts
What is a DPA?
A Data Processing Agreement is a contract between you (the controller) and FlowState Charts (the processor) that describes how personal data is processed on your behalf when you use FlowState Charts.
When you may need one
- You process personal data of customers or employees in FlowState Charts
- Your compliance program requires a written processor agreement
- You need documentation of security and subprocessor practices
Our commitments (summary)
Security
Encryption in transit and at rest for sensitive data, org isolation, and access controls.
No model training
Customer content is not used to train foundation models.
Subprocessors
Core vendors are listed in the Trust Center; material changes can be communicated under the DPA.
Assistance
Reasonable assistance with data subject requests and security inquiries.