Cartaia publishes its data processing agreement
Cartaia now has its own data processing agreement, built on the EU standard contractual clauses. It is part of the terms and one click away from every Solo page.
Why it matters
Anyone who keeps customer or employee data in a cloud service is responsible for how that service handles it. Under the GDPR that responsibility is set out in a data processing agreement. Without one, a business cannot show who processes its data, for what and under which rules.
Built on the EU clauses
Cartaia's agreement follows the standard contractual clauses from the EU, the text data protection authorities and lawyers already know. It sits with the terms, so it applies from the first day without a separate negotiation.
The agreement matches how Cartaia is built: data in Europe (Germany), on servers Northflow runs itself, behind BankID sign-in.
