Data Processing Agreement
Our GDPR-compliant DPA ensures your data is processed securely and in accordance with UK and EU data protection regulations.
Download Our DPA
Available in PDF format for your records and legal review.
Version 1.0 • Effective January 13, 2026 • Self-serve PDF download is planned for a future release — in the meantime, contact us and we'll send a signed copy within 2 business days.
Key DPA Provisions
Data Controller / Data Processor Relationship
When you use Clarium, you remain the Data Controller for your organization's data. Clarium Systems Limited acts as a Data Processor, processing personal data only on your documented instructions.
Sub-Processors
We use carefully selected sub-processors including Microsoft Azure (application hosting, database, and transactional email via Azure Communication Services, North Europe (Ireland) primary) and Resend (marketing waitlist emails only). A full list is available in Schedule B of the DPA and on our Sub-processors page.
Data Location
All customer data is stored in EU data centers. We do not transfer personal data outside the EEA except where adequate safeguards are in place (e.g., Standard Contractual Clauses).
Technical Measures
We implement technical and organizational measures including encryption at rest and in transit, row-level security, access controls, and regular security audits.
Data Subject Rights
We assist you in fulfilling data subject rights requests including access, rectification, erasure, and portability within the timelines required by GDPR.
Breach Notification
In the event of a personal data breach, we will notify you without undue delay and within 72 hours of becoming aware of the breach.
Audit Rights
You have the right to audit our compliance with this DPA. We provide security certifications and audit reports upon request.
Data Deletion
Upon termination of services, we will delete or return all personal data within 30 days, unless retention is required by law.
Need a Signed Copy?
For Enterprise customers requiring a countersigned DPA, please contact us with your specific requirements.