Data processing agreement
DRAFTLast updated 7 Oct 2026
This document is a draft placeholder and is not yet in force. The final text will be published before launch.
DRAFT — placeholder text, not in force. The final data processing agreement will be supplied by the owner's lawyer (ODPC track) and published before launch.
1. Roles
DRAFT — You are the data controller for the personal data in your workspace; we process it on your behalf.
2. Processing details
DRAFT — Subject matter, duration, nature and purpose of processing; types of personal data and categories of data subjects.
3. Our obligations
DRAFT — Processing only on documented instructions, confidentiality, security measures, assistance with data subject requests, breach notification timelines.
4. Sub-processors
DRAFT — Current list, how we notify changes, and your right to object.
5. International transfers
DRAFT — Safeguards for transfers outside Kenya.
6. Return and deletion
DRAFT — Export of all your data and deletion at the end of the service.