Data Processing Agreement
Last updated: August 20, 2025
This Data Processing Agreement (DPA) forms part of your agreement with Fabric and applies where you act as the controller and Fabric acts as your processor of Personal Data.1. Roles and scope
You determine purposes and means of processing. Fabric processes Personal Data only on your documented instructions, except where processing is required by law.2. Processing details
Subject matter: provision of the Fabric platform. Duration: term of your agreement and until deletion/return. Nature and purpose: hosting, storage, transmission, and analysis necessary to provide and improve the services you use.3. Data types and subjects
Data: identifiers, contact details, account and usage data, and content you submit. Special categories are not required and should not be provided unless permitted by law and agreed in writing. Subjects: your users, customers, and personnel whose data you process via Fabric.4. Security
Fabric maintains appropriate technical and organizational measures, including encryption (in transit/at rest where applicable), access controls, least-privilege practices, logging/monitoring, vulnerability management, and business continuity controls.5. Sub-processors
You authorize Fabric to engage sub-processors. Fabric remains responsible for their obligations, will maintain a list of current sub-processors, and will provide notice of changes to allow reasonable objections.6. International transfers
Where Personal Data is transferred internationally, Fabric ensures appropriate transfer mechanisms (e.g., EU Standard Contractual Clauses) where required by law.7. Data subject requests
Taking into account the nature of processing, Fabric assists you by appropriate technical and organizational measures in responding to data subject rights requests.8. Breach notification
Fabric will notify you without undue delay after becoming aware of a Personal Data Breach and will provide information to help you meet any legal reporting obligations.9. Deletion and return
Upon termination or on your request, Fabric will delete or return Personal Data and delete existing copies within a reasonable period, unless retention is legally required.10. Contact
For questions about this DPA or data protection, contact us through your usual Fabric support channel.