Data Processing Agreement (DPA)

Last updated: April 29, 2026

1. Parties and roles

In this DPA, the customer acts as Data Controller and Tool Radar Lab acts as Data Processor for personal data processed through the service.

2. Processing scope

We process personal data only on documented customer instructions to provide hosting, application functionality, support, and security operations.

3. Security commitments

Tool Radar Lab applies technical and organizational safeguards, including encryption in transit, access controls, and audit-ready procedures to protect customer data.

4. Sub-processors and transfers

We use approved sub-processors listed on the Sub-processor List page and require contractual data protection obligations from each sub-processor.

5. Data subject requests

We assist customers in handling access, deletion, and portability requests where required by GDPR.