Data Processing Agreement
Self-service signing for any customer — paid or free tier. No sales call required. Below: what's in it, who needs it, and how to sign.
What the DPA covers
The CustomerHero Data Processing Agreement is the contract that governs how we (CustomerHero, the processor) handle personal data on your behalf (you, the controller) under GDPR, UK GDPR, and equivalent regimes. It documents:
- Categories of personal data we process for you.
- Purposes and duration of the processing.
- Technical and organisational security measures we apply.
- Sub-processor list and our notification process for changes.
- International transfer safeguards (Standard Contractual Clauses, where applicable).
- Data-subject rights, breach notification, and audit cooperation terms.
Do you need it?
If you're processing personal data of EU/UK residents (or any jurisdiction with similar privacy laws) using CustomerHero, yes. We make signing as fast as possible — no negotiation required for the standard form, and we accept redlines on enterprise contracts.
How to sign
- 1. Email us at legal@customerhero.app. Tell us your company name and the entity that should countersign.
- 2. We send the standard DPA via DocuSign. Most customers sign it as-is and we counter-sign within one business day.
- 3. Enterprise: redlines welcome. We accept redlines on the standard form for enterprise contracts and turn them around in under a week.
Sub-processors
We publish our current sub-processor list publicly. Subscribe to email updates from that page if you want to be notified before we add a new one.
Ready to sign?
Email legal@customerhero.app and we'll send the standard DPA via DocuSign within one business day.