Data Processing Agreement (DPA)
v1.0 · Yürürlük tarihi: 2026-04-01
Summary of the DPA we sign with B2B customers. Reach [email protected] for the full text.
Scope
AIDE acts as a data processor for personal data processed when scanning customer websites.
Sub-processors
AWS Frankfurt (hosting), ClickHouse Cloud (analytics), Resend (email), Stripe (payments). 30-day notice before adding a new sub-processor.
Security measures
TLS 1.3 in transit, AES-256 at rest, MFA + role-based access, annual penetration test, SOC 2 Type II on roadmap.
Breach notification
We notify customers and the Turkish KVK Kurulu within 72 hours of detection.
End of agreement
On termination we either return or irreversibly delete customer data within 30 days.