Data Processing Agreement

Last updated 5 August 2026

1. Roles

Where you use the service to monitor sites on behalf of your own clients, you are the controller and we are the processor. This agreement applies automatically to every paid account and forms part of the Terms.

2. Subject matter

We process the addresses you configure, the results of checks against them, and the contact details you supply for alerts. Processing lasts as long as your account does.

3. Our obligations

• Process personal data only on your documented instructions, which the product settings represent.
• Keep staff with access bound to confidentiality.
• Apply encryption in transit, encryption of stored credentials, access control and daily backups.
• Notify you without undue delay, and in any case within 72 hours, of a personal data breach affecting you.
• Assist with data subject requests and delete or return data when the account closes.

4. Sub-processors

The current list is published in our Privacy Policy. We give 30 days notice before adding a new one, and you may object.

5. International transfers

Where data leaves the EEA we rely on Standard Contractual Clauses or an adequacy decision. Ask us and we will send the executed copies.

Questions about this document: legal@acmepulse.com