Data Processing Agreement
Last updated: 2026
This DPA forms part of our agreement where TickAI processes personal data on your behalf as a processor under the GDPR. A signed version is available for business customers; this page summarises the key terms and will be finalised with legal review before launch.
Roles
You are the controller; TickAI is the processor for the content and account data you submit.
Scope & purpose
We process data only to provide the service: scanning sites, reading provenance, triage, review records, audit exports, and the optional disclosure overlay.
Security & sub-processors
We apply tenant isolation at the database layer (row-level security), encrypt data in transit, and use the sub-processors listed in our privacy policy.
Data subject requests & deletion
We assist you with data-subject requests and delete or return data on termination, subject to legal retention requirements.