Data Processing Agreement
Last updated 2026-07-19
Launch draft pending counsel review. Questions: legal@pagerox.com.
Scope
This DPA template governs Pagerox's processing of personal data contained in customer workspace content, as processor on the customer's documented instructions. Contact legal@pagerox.com for a countersigned copy.
Processing details
Subject matter: operating AI employees for the customer workspace. Duration: the subscription term plus the deletion window. Nature: in-flight processing of messages, storage of distilled knowledge, model inference via configured providers. Data subjects: workspace members and individuals mentioned in customer content. Categories: business communications and documents; no special categories are required by the service.
Security measures
Encryption in transit and at rest, row-level tenancy isolation, server-side credential vaulting, append-only audit logging, least-privilege internal access, and the process-and-drop ingestion boundary described in the Privacy Policy.
Subprocessors
The customer authorizes the subprocessors listed at /legal/subprocessors. We give 30 days notice before adding one; the customer may object on reasonable data-protection grounds.
Assistance and deletion
We assist with data-subject requests and security incident notifications without undue delay (and within 72 hours for personal-data breaches). On termination, customer content is deleted within 30 days; audit records survive in anonymized form.