Data Processing Agreement

Draft — this document is being finalised and is pending legal review before launch.

This DPA forms part of your agreement with A2Z IT and governs our processing of your customers' personal data on your behalf. A final, solicitor-reviewed version will be published before launch.

Roles

You are the controller; A2Z IT is the processor. We process contact data only to provide the service and on your documented instructions.

Security & residency

Data is encrypted in transit and at rest and stored in the UK. Access is restricted and audited.

Sub-processors

Microsoft (Azure, M365), GoCardless, Intuit (QuickBooks) and Cloudflare.

Assistance

We support you with data-subject requests, breach notification and deletion on termination.