A signed DPA, on request, for any EU customer.

Subject matter, duration, nature and purpose of processing, types of personal data, categories of data subjects, and controller/processor obligations. Standard terms cover the common case; custom riders are handled when procurement requires them.

Send your legal entity name, billing address, and the workspace email you use with Luota. Luota countersigns and returns the signed PDF, typically within two business days.

The canonical processor list lives on /subprocessors so customers and procurement teams can link to one stable disclosure page.

Operational safeguards, backup posture, encryption boundaries, and abuse controls are summarized on the public security page.