Data Processing Addendum (DPA)

The SiteSpresso Data Processing Addendum (DPA) defines data protection obligations for customers that require processor terms.

The DPA is intended for customers processing personal data under laws that require data processing agreements.

In most use cases, the customer acts as controller for site content and user-submitted data, and SiteSpresso acts as processor for service delivery.

Subprocessors are used for hosting, billing, storage, and selected AI infrastructure.

SiteSpresso applies technical and organizational measures designed to protect personal data and support secure operations.

Security incidents are evaluated and handled according to internal response processes and contractual commitments.

To request a DPA, contact legal@sitespresso.com with your account details and legal entity information.

Our team will provide the current DPA template and next steps for review and signature.