[{"data":1,"prerenderedAt":835},["ShallowReactive",2],{"mdc--154t1g-key":3},{"data":4,"body":5},{},{"type":6,"children":7},"root",[8,16,32,45,52,57,145,151,156,169,175,180,203,209,216,221,226,232,237,243,248,254,259,277,282,288,293,299,304,309,315,320,331,336,341,347,352,358,363,376,382,387,392,397,403,408,414,419,424,429,434,440,503,509,514,617,623,813,818,824],{"type":9,"tag":10,"props":11,"children":12},"element","p",{},[13],{"type":14,"value":15},"text","Last updated: 6 November 2026",{"type":9,"tag":10,"props":17,"children":18},{},[19,21,30],{"type":14,"value":20},"This Data Processing Agreement (\"DPA\") forms part of the ",{"type":9,"tag":22,"props":23,"children":27},"a",{"href":24,"rel":25},"https://www.grizzlyware.com/legal/terms-conditions",[26],"nofollow",[28],{"type":14,"value":29},"Terms and Conditions",{"type":14,"value":31}," (the \"Terms\") between Grizzlyware Ltd (\"we\", \"us\", \"our\") and the customer who uses our services (\"you\", \"your\"). It applies whenever we process Personal Data on your behalf in providing our services, and it sets out the terms required by Article 28 of the UK General Data Protection Regulation (\"UK GDPR\") and, where it applies, the EU General Data Protection Regulation (\"EU GDPR\").",{"type":9,"tag":10,"props":33,"children":34},{},[35,37,43],{"type":14,"value":36},"You accept this DPA by accepting the Terms, or any proposal, quote, order or other document that refers to the Terms. No separate signature is needed. If you want a countersigned copy for your records, please contact ",{"type":9,"tag":22,"props":38,"children":40},{"href":39},"mailto:contact@grizzlyware.com",[41],{"type":14,"value":42},"contact@grizzlyware.com",{"type":14,"value":44},".",{"type":9,"tag":46,"props":47,"children":49},"h2",{"id":48},"_1-definitions",[50],{"type":14,"value":51},"1. Definitions",{"type":9,"tag":10,"props":53,"children":54},{},[55],{"type":14,"value":56},"In this DPA:",{"type":9,"tag":58,"props":59,"children":60},"ul",{},[61,73,115,125,135],{"type":9,"tag":62,"props":63,"children":64},"li",{},[65,71],{"type":9,"tag":66,"props":67,"children":68},"strong",{},[69],{"type":14,"value":70},"\"Data Protection Laws\"",{"type":14,"value":72}," means the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and, where applicable, the EU GDPR, each as amended or replaced from time to time.",{"type":9,"tag":62,"props":74,"children":75},{},[76,81,83,88,89,94,95,100,101,106,108,113],{"type":9,"tag":66,"props":77,"children":78},{},[79],{"type":14,"value":80},"\"Personal Data\"",{"type":14,"value":82},", ",{"type":9,"tag":66,"props":84,"children":85},{},[86],{"type":14,"value":87},"\"Controller\"",{"type":14,"value":82},{"type":9,"tag":66,"props":90,"children":91},{},[92],{"type":14,"value":93},"\"Processor\"",{"type":14,"value":82},{"type":9,"tag":66,"props":96,"children":97},{},[98],{"type":14,"value":99},"\"Data Subject\"",{"type":14,"value":82},{"type":9,"tag":66,"props":102,"children":103},{},[104],{"type":14,"value":105},"\"Processing\"",{"type":14,"value":107}," and ",{"type":9,"tag":66,"props":109,"children":110},{},[111],{"type":14,"value":112},"\"Personal Data Breach\"",{"type":14,"value":114}," have the meanings given in the Data Protection Laws.",{"type":9,"tag":62,"props":116,"children":117},{},[118,123],{"type":9,"tag":66,"props":119,"children":120},{},[121],{"type":14,"value":122},"\"Customer Personal Data\"",{"type":14,"value":124}," means Personal Data that we process on your behalf as your Processor in providing the Services.",{"type":9,"tag":62,"props":126,"children":127},{},[128,133],{"type":9,"tag":66,"props":129,"children":130},{},[131],{"type":14,"value":132},"\"Services\"",{"type":14,"value":134}," means the services we provide to you that involve processing Customer Personal Data, including web and application hosting, email hosting, software support and maintenance, bespoke development, and managed AI services.",{"type":9,"tag":62,"props":136,"children":137},{},[138,143],{"type":9,"tag":66,"props":139,"children":140},{},[141],{"type":14,"value":142},"\"Sub-processor\"",{"type":14,"value":144}," means a third party that we engage to process Customer Personal Data.",{"type":9,"tag":46,"props":146,"children":148},{"id":147},"_2-roles-of-the-parties",[149],{"type":14,"value":150},"2. Roles of the parties",{"type":9,"tag":10,"props":152,"children":153},{},[154],{"type":14,"value":155},"For Customer Personal Data, you are the Controller and we are your Processor. Where you are yourself a Processor acting for another Controller, we are your Sub-processor, and you warrant that your Controller has authorised you to appoint us.",{"type":9,"tag":10,"props":157,"children":158},{},[159,161,168],{"type":14,"value":160},"This DPA does not apply to Personal Data that we process as a Controller in our own right, such as your account, contact, billing and support details, and visitors to our own websites. That processing is described in our ",{"type":9,"tag":22,"props":162,"children":165},{"href":163,"rel":164},"https://www.grizzlyware.com/legal/privacy-policy",[26],[166],{"type":14,"value":167},"Privacy Policy",{"type":14,"value":44},{"type":9,"tag":46,"props":170,"children":172},{"id":171},"_3-your-responsibilities",[173],{"type":14,"value":174},"3. Your responsibilities",{"type":9,"tag":10,"props":176,"children":177},{},[178],{"type":14,"value":179},"You are responsible for:",{"type":9,"tag":58,"props":181,"children":182},{},[183,188,193,198],{"type":9,"tag":62,"props":184,"children":185},{},[186],{"type":14,"value":187},"having a lawful basis for the processing you ask us to carry out, and for giving Data Subjects any privacy information required by Data Protection Laws;",{"type":9,"tag":62,"props":189,"children":190},{},[191],{"type":14,"value":192},"obtaining any consents required, including for cookies and similar technologies on websites and applications we host or build for you;",{"type":9,"tag":62,"props":194,"children":195},{},[196],{"type":14,"value":197},"making sure your instructions to us comply with Data Protection Laws; and",{"type":9,"tag":62,"props":199,"children":200},{},[201],{"type":14,"value":202},"the accuracy, quality and legality of the Customer Personal Data you, or your users, give us.",{"type":9,"tag":46,"props":204,"children":206},{"id":205},"_4-our-obligations",[207],{"type":14,"value":208},"4. Our obligations",{"type":9,"tag":210,"props":211,"children":213},"h3",{"id":212},"_41-instructions",[214],{"type":14,"value":215},"4.1 Instructions",{"type":9,"tag":10,"props":217,"children":218},{},[219],{"type":14,"value":220},"We will process Customer Personal Data only on your documented instructions, including in relation to international transfers, unless the law requires us to do otherwise. In that case we will tell you about the legal requirement before processing, unless the law forbids us from doing so. Your instructions are set out in the Terms, this DPA, any proposal, quote, order or statement of work, and any configuration you choose for the Services. You may give further reasonable written instructions.",{"type":9,"tag":10,"props":222,"children":223},{},[224],{"type":14,"value":225},"We will tell you promptly if we believe an instruction breaches Data Protection Laws, and we may suspend the relevant processing until you confirm or change the instruction.",{"type":9,"tag":210,"props":227,"children":229},{"id":228},"_42-confidentiality",[230],{"type":14,"value":231},"4.2 Confidentiality",{"type":9,"tag":10,"props":233,"children":234},{},[235],{"type":14,"value":236},"We will make sure that everyone we authorise to process Customer Personal Data, including our staff and contractors, has committed to confidentiality or is under an appropriate statutory duty of confidentiality, and accesses it only as needed to provide the Services.",{"type":9,"tag":210,"props":238,"children":240},{"id":239},"_43-security",[241],{"type":14,"value":242},"4.3 Security",{"type":9,"tag":10,"props":244,"children":245},{},[246],{"type":14,"value":247},"We will put in place appropriate technical and organisational measures to protect Customer Personal Data, as required by Article 32 of the UK GDPR. These measures are described in Schedule 2. We may update them from time to time, provided the overall level of protection is not reduced.",{"type":9,"tag":210,"props":249,"children":251},{"id":250},"_44-personal-data-breaches",[252],{"type":14,"value":253},"4.4 Personal Data Breaches",{"type":9,"tag":10,"props":255,"children":256},{},[257],{"type":14,"value":258},"If we become aware of a Personal Data Breach affecting Customer Personal Data, we will notify you without undue delay, and in any case within 48 hours. We will give you the information reasonably available to us that you need to meet your own obligations, including, where known:",{"type":9,"tag":58,"props":260,"children":261},{},[262,267,272],{"type":9,"tag":62,"props":263,"children":264},{},[265],{"type":14,"value":266},"the nature of the breach, the categories and approximate number of Data Subjects and records concerned;",{"type":9,"tag":62,"props":268,"children":269},{},[270],{"type":14,"value":271},"the likely consequences of the breach; and",{"type":9,"tag":62,"props":273,"children":274},{},[275],{"type":14,"value":276},"the measures taken or proposed to address the breach and reduce its possible adverse effects.",{"type":9,"tag":10,"props":278,"children":279},{},[280],{"type":14,"value":281},"Where we do not have all of this information at first, we will provide it in stages as it becomes available. Notifying you of a breach is not an admission of fault or liability.",{"type":9,"tag":210,"props":283,"children":285},{"id":284},"_45-data-subject-requests",[286],{"type":14,"value":287},"4.5 Data Subject requests",{"type":9,"tag":10,"props":289,"children":290},{},[291],{"type":14,"value":292},"Taking into account the nature of the processing, we will help you, by appropriate technical and organisational measures where possible, to respond to requests from Data Subjects exercising their rights under Data Protection Laws. If we receive such a request directly, we will pass it to you promptly and will not respond to it ourselves, except to tell the Data Subject to contact you, unless you authorise us to.",{"type":9,"tag":210,"props":294,"children":296},{"id":295},"_46-other-assistance",[297],{"type":14,"value":298},"4.6 Other assistance",{"type":9,"tag":10,"props":300,"children":301},{},[302],{"type":14,"value":303},"We will give you reasonable assistance with your obligations relating to security, breach notification, data protection impact assessments and prior consultation with the Information Commissioner's Office or another supervisory authority, taking into account the nature of the processing and the information available to us.",{"type":9,"tag":10,"props":305,"children":306},{},[307],{"type":14,"value":308},"Where assistance under sections 4.5 or 4.6 goes beyond what is normally included in the Services, we may charge for it at our standard rates, as set out in the Terms. We will not charge for assistance needed because of our own breach of this DPA.",{"type":9,"tag":46,"props":310,"children":312},{"id":311},"_5-sub-processors",[313],{"type":14,"value":314},"5. Sub-processors",{"type":9,"tag":10,"props":316,"children":317},{},[318],{"type":14,"value":319},"You give us general authorisation to engage Sub-processors. Our current Sub-processors are listed in Schedule 3.",{"type":9,"tag":10,"props":321,"children":322},{},[323,325,329],{"type":14,"value":324},"We will tell you about any intended addition or replacement of a Sub-processor by updating the list in Schedule 3 at least 7 days before the change takes effect. If you would like to be emailed when the list changes, please ask us at ",{"type":9,"tag":22,"props":326,"children":327},{"href":39},[328],{"type":14,"value":42},{"type":14,"value":330},". You may object on reasonable data protection grounds within that period. If you do, we will discuss your concerns in good faith. If we cannot reasonably resolve them, you may end the affected Services, without penalty, by giving us written notice before the change takes effect.",{"type":9,"tag":10,"props":332,"children":333},{},[334],{"type":14,"value":335},"Where we engage a Sub-processor, we will put in place a written contract that imposes data protection obligations on it which are no less protective than those in this DPA. We remain responsible to you for the performance of our Sub-processors' obligations.",{"type":9,"tag":10,"props":337,"children":338},{},[339],{"type":14,"value":340},"Some Services, such as managed AI services, rely on a third-party provider that you choose or agree with us for a particular project (for example, a large language model provider). Where this is the case, the provider will be named in the relevant proposal, quote, order or statement of work. By accepting that document, you authorise us to engage that provider as a Sub-processor for that Service.",{"type":9,"tag":46,"props":342,"children":344},{"id":343},"_6-international-transfers",[345],{"type":14,"value":346},"6. International transfers",{"type":9,"tag":10,"props":348,"children":349},{},[350],{"type":14,"value":351},"We will not transfer Customer Personal Data outside the United Kingdom, or allow a Sub-processor to do so, unless the transfer complies with Data Protection Laws. This means the destination must be covered by UK adequacy regulations, or appropriate safeguards must be in place, such as the ICO's International Data Transfer Agreement, the International Data Transfer Addendum to the EU Standard Contractual Clauses, or, for transfers to the United States, the UK Extension to the EU-US Data Privacy Framework where the recipient is certified under it.",{"type":9,"tag":46,"props":353,"children":355},{"id":354},"_7-audits-and-information",[356],{"type":14,"value":357},"7. Audits and information",{"type":9,"tag":10,"props":359,"children":360},{},[361],{"type":14,"value":362},"We will make available to you the information reasonably needed to demonstrate our compliance with Article 28 of the UK GDPR. This will normally be through written answers to your reasonable questions and copies of relevant policies, certifications or Sub-processor audit reports.",{"type":9,"tag":10,"props":364,"children":365},{},[366,368,374],{"type":14,"value":367},"Where that information is not enough to demonstrate our compliance, or where a supervisory authority requires it, we will allow and contribute to audits, including inspections, by you or an independent auditor you appoint. Audits must be on at least 30 days' written notice, during our ",{"type":9,"tag":22,"props":369,"children":371},{"href":24,"rel":370},[26],[372],{"type":14,"value":373},"Usual Business Hours",{"type":14,"value":375},", no more than once in any 12-month period (unless following a Personal Data Breach or required by a supervisory authority), and subject to reasonable confidentiality obligations. You will pay the reasonable costs of any audit, including our time at our standard rates, unless the audit shows that we have materially breached this DPA.",{"type":9,"tag":46,"props":377,"children":379},{"id":378},"_8-return-and-deletion",[380],{"type":14,"value":381},"8. Return and deletion",{"type":9,"tag":10,"props":383,"children":384},{},[385],{"type":14,"value":386},"When the Services that involve processing Customer Personal Data end, we will, at your choice, return the Customer Personal Data to you in a commonly used format, or delete it. You should tell us your choice within 30 days of the Services ending. If you do not, we may delete the Customer Personal Data.",{"type":9,"tag":10,"props":388,"children":389},{},[390],{"type":14,"value":391},"Deletion from our live systems will take place within 30 days, and Customer Personal Data will expire from our backups in line with our normal backup rotation, which is no more than 90 days. We may keep Customer Personal Data where the law requires us to, in which case we will keep it confidential and process it only for the purpose for which the law requires it.",{"type":9,"tag":10,"props":393,"children":394},{},[395],{"type":14,"value":396},"We may charge for return of data in a format, or by a method, that goes beyond what is normally included in the Services.",{"type":9,"tag":46,"props":398,"children":400},{"id":399},"_9-liability",[401],{"type":14,"value":402},"9. Liability",{"type":9,"tag":10,"props":404,"children":405},{},[406],{"type":14,"value":407},"Each party's liability under or in connection with this DPA is subject to the exclusions and limitations of liability in the Terms. Nothing in this DPA limits either party's liability to Data Subjects or to a supervisory authority where the law does not allow it to be limited.",{"type":9,"tag":46,"props":409,"children":411},{"id":410},"_10-general",[412],{"type":14,"value":413},"10. General",{"type":9,"tag":10,"props":415,"children":416},{},[417],{"type":14,"value":418},"This DPA lasts for as long as we process Customer Personal Data on your behalf, and the provisions that by their nature should survive will survive its termination.",{"type":9,"tag":10,"props":420,"children":421},{},[422],{"type":14,"value":423},"If there is any conflict between this DPA and the Terms, or any proposal, quote, order or statement of work, this DPA takes precedence in relation to the processing of Customer Personal Data, unless a document signed by both parties expressly says otherwise.",{"type":9,"tag":10,"props":425,"children":426},{},[427],{"type":14,"value":428},"We may update this DPA from time to time, for example to reflect changes in Data Protection Laws or in our Sub-processors. We will not make changes that materially reduce the protection given to Customer Personal Data without your agreement, unless required by law.",{"type":9,"tag":10,"props":430,"children":431},{},[432],{"type":14,"value":433},"This DPA is governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising from it.",{"type":9,"tag":46,"props":435,"children":437},{"id":436},"schedule-1-details-of-processing",[438],{"type":14,"value":439},"Schedule 1: Details of processing",{"type":9,"tag":58,"props":441,"children":442},{},[443,453,463,473,483,493],{"type":9,"tag":62,"props":444,"children":445},{},[446,451],{"type":9,"tag":66,"props":447,"children":448},{},[449],{"type":14,"value":450},"Subject matter:",{"type":14,"value":452}," providing the Services to you under the Terms.",{"type":9,"tag":62,"props":454,"children":455},{},[456,461],{"type":9,"tag":66,"props":457,"children":458},{},[459],{"type":14,"value":460},"Duration:",{"type":14,"value":462}," for as long as we provide the Services, and then until the Customer Personal Data is returned or deleted under section 8.",{"type":9,"tag":62,"props":464,"children":465},{},[466,471],{"type":9,"tag":66,"props":467,"children":468},{},[469],{"type":14,"value":470},"Nature and purpose:",{"type":14,"value":472}," hosting, storing, backing up, transmitting, relaying and securing data; maintaining, supporting, debugging and developing software; sending and receiving email; and, for managed AI services, submitting data to AI models and returning the results. In each case, only as needed to provide the Services you have asked for.",{"type":9,"tag":62,"props":474,"children":475},{},[476,481],{"type":9,"tag":66,"props":477,"children":478},{},[479],{"type":14,"value":480},"Categories of Data Subjects:",{"type":14,"value":482}," as determined by you. Typically your staff, customers, end users, website visitors, suppliers and other contacts.",{"type":9,"tag":62,"props":484,"children":485},{},[486,491],{"type":9,"tag":66,"props":487,"children":488},{},[489],{"type":14,"value":490},"Categories of Personal Data:",{"type":14,"value":492}," as determined by you. Typically names, contact details, account and login details, content of communications and documents, transaction and order details, IP addresses, device and usage information, and any other data you or your users submit to the systems we host or support.",{"type":9,"tag":62,"props":494,"children":495},{},[496,501],{"type":9,"tag":66,"props":497,"children":498},{},[499],{"type":14,"value":500},"Special category and criminal offence data:",{"type":14,"value":502}," we do not expect to process these. You must not use the Services to process them unless we have agreed in writing to the additional measures needed.",{"type":9,"tag":46,"props":504,"children":506},{"id":505},"schedule-2-technical-and-organisational-security-measures",[507],{"type":14,"value":508},"Schedule 2: Technical and organisational security measures",{"type":9,"tag":10,"props":510,"children":511},{},[512],{"type":14,"value":513},"We maintain the following measures, appropriate to the risk:",{"type":9,"tag":58,"props":515,"children":516},{},[517,527,537,547,557,567,577,587,597,607],{"type":9,"tag":62,"props":518,"children":519},{},[520,525],{"type":9,"tag":66,"props":521,"children":522},{},[523],{"type":14,"value":524},"Encryption:",{"type":14,"value":526}," data is encrypted in transit using TLS. Data at rest, including backups, is encrypted where supported by the underlying infrastructure provider.",{"type":9,"tag":62,"props":528,"children":529},{},[530,535],{"type":9,"tag":66,"props":531,"children":532},{},[533],{"type":14,"value":534},"Access control:",{"type":14,"value":536}," administrative access to systems is limited to authorised personnel, uses individual accounts, SSH keys or strong passwords, and multi-factor authentication where available. Access is granted on a need-to-know basis and removed when no longer needed.",{"type":9,"tag":62,"props":538,"children":539},{},[540,545],{"type":9,"tag":66,"props":541,"children":542},{},[543],{"type":14,"value":544},"Network security:",{"type":14,"value":546}," firewalls restrict access to services that need to be exposed, and administrative interfaces are not publicly exposed where avoidable.",{"type":9,"tag":62,"props":548,"children":549},{},[550,555],{"type":9,"tag":66,"props":551,"children":552},{},[553],{"type":14,"value":554},"Patching and maintenance:",{"type":14,"value":556}," operating systems and software we manage are kept up to date, and security updates are applied promptly.",{"type":9,"tag":62,"props":558,"children":559},{},[560,565],{"type":9,"tag":66,"props":561,"children":562},{},[563],{"type":14,"value":564},"Backups and resilience:",{"type":14,"value":566}," regular backups are taken and stored separately from the primary systems, and restores are tested periodically.",{"type":9,"tag":62,"props":568,"children":569},{},[570,575],{"type":9,"tag":66,"props":571,"children":572},{},[573],{"type":14,"value":574},"Monitoring:",{"type":14,"value":576}," systems are monitored for availability and suspicious activity, and logs are kept for as long as needed for security and troubleshooting, in line with the retention periods of the systems and providers that generate them. Access to logs is restricted to authorised personnel.",{"type":9,"tag":62,"props":578,"children":579},{},[580,585],{"type":9,"tag":66,"props":581,"children":582},{},[583],{"type":14,"value":584},"Data minimisation:",{"type":14,"value":586}," we access Customer Personal Data only as needed to provide the Services. Where practical, we use test or anonymised data for development.",{"type":9,"tag":62,"props":588,"children":589},{},[590,595],{"type":9,"tag":66,"props":591,"children":592},{},[593],{"type":14,"value":594},"Personnel:",{"type":14,"value":596}," staff and contractors are bound by confidentiality obligations and are made aware of their data protection responsibilities.",{"type":9,"tag":62,"props":598,"children":599},{},[600,605],{"type":9,"tag":66,"props":601,"children":602},{},[603],{"type":14,"value":604},"Incident response:",{"type":14,"value":606}," we have a process for detecting, investigating and responding to security incidents, including notifying you under section 4.4.",{"type":9,"tag":62,"props":608,"children":609},{},[610,615],{"type":9,"tag":66,"props":611,"children":612},{},[613],{"type":14,"value":614},"Sub-processor due diligence:",{"type":14,"value":616}," we assess the security of our Sub-processors before engaging them.",{"type":9,"tag":46,"props":618,"children":620},{"id":619},"schedule-3-sub-processors",[621],{"type":14,"value":622},"Schedule 3: Sub-processors",{"type":9,"tag":624,"props":625,"children":626},"table",{},[627,651],{"type":9,"tag":628,"props":629,"children":630},"thead",{},[631],{"type":9,"tag":632,"props":633,"children":634},"tr",{},[635,641,646],{"type":9,"tag":636,"props":637,"children":638},"th",{},[639],{"type":14,"value":640},"Sub-processor",{"type":9,"tag":636,"props":642,"children":643},{},[644],{"type":14,"value":645},"Purpose",{"type":9,"tag":636,"props":647,"children":648},{},[649],{"type":14,"value":650},"Location of processing",{"type":9,"tag":652,"props":653,"children":654},"tbody",{},[655,674,690,708,726,744,762,780,797],{"type":9,"tag":632,"props":656,"children":657},{},[658,664,669],{"type":9,"tag":659,"props":660,"children":661},"td",{},[662],{"type":14,"value":663},"Akamai Technologies (Linode)",{"type":9,"tag":659,"props":665,"children":666},{},[667],{"type":14,"value":668},"Server and application hosting; object storage",{"type":9,"tag":659,"props":670,"children":671},{},[672],{"type":14,"value":673},"United Kingdom (servers); European Union, Netherlands and France (object storage)",{"type":9,"tag":632,"props":675,"children":676},{},[677,682,686],{"type":9,"tag":659,"props":678,"children":679},{},[680],{"type":14,"value":681},"DigitalOcean, LLC",{"type":9,"tag":659,"props":683,"children":684},{},[685],{"type":14,"value":668},{"type":9,"tag":659,"props":687,"children":688},{},[689],{"type":14,"value":673},{"type":9,"tag":632,"props":691,"children":692},{},[693,698,703],{"type":9,"tag":659,"props":694,"children":695},{},[696],{"type":14,"value":697},"Amazon Web Services",{"type":9,"tag":659,"props":699,"children":700},{},[701],{"type":14,"value":702},"Server and application hosting; storage",{"type":9,"tag":659,"props":704,"children":705},{},[706],{"type":14,"value":707},"United Kingdom; European Union (Germany); Canada (for specific services only)",{"type":9,"tag":632,"props":709,"children":710},{},[711,716,721],{"type":9,"tag":659,"props":712,"children":713},{},[714],{"type":14,"value":715},"Backblaze, Inc.",{"type":9,"tag":659,"props":717,"children":718},{},[719],{"type":14,"value":720},"Off-site backup storage",{"type":9,"tag":659,"props":722,"children":723},{},[724],{"type":14,"value":725},"European Union (Netherlands)",{"type":9,"tag":632,"props":727,"children":728},{},[729,734,739],{"type":9,"tag":659,"props":730,"children":731},{},[732],{"type":14,"value":733},"Cloudflare, Inc.",{"type":9,"tag":659,"props":735,"children":736},{},[737],{"type":14,"value":738},"DNS, content delivery, security, email delivery, edge hosting and AI services (such as Workers AI and AI Gateway)",{"type":9,"tag":659,"props":740,"children":741},{},[742],{"type":14,"value":743},"Global network; see section 6",{"type":9,"tag":632,"props":745,"children":746},{},[747,752,757],{"type":9,"tag":659,"props":748,"children":749},{},[750],{"type":14,"value":751},"Resend, Inc.",{"type":9,"tag":659,"props":753,"children":754},{},[755],{"type":14,"value":756},"Email delivery",{"type":9,"tag":659,"props":758,"children":759},{},[760],{"type":14,"value":761},"United States",{"type":9,"tag":632,"props":763,"children":764},{},[765,770,775],{"type":9,"tag":659,"props":766,"children":767},{},[768],{"type":14,"value":769},"PostHog Inc.",{"type":9,"tag":659,"props":771,"children":772},{},[773],{"type":14,"value":774},"Product analytics, where included in the Services",{"type":9,"tag":659,"props":776,"children":777},{},[778],{"type":14,"value":779},"European Union (Germany)",{"type":9,"tag":632,"props":781,"children":782},{},[783,788,793],{"type":9,"tag":659,"props":784,"children":785},{},[786],{"type":14,"value":787},"Anthropic, PBC",{"type":9,"tag":659,"props":789,"children":790},{},[791],{"type":14,"value":792},"AI assistance with software development, support and maintenance",{"type":9,"tag":659,"props":794,"children":795},{},[796],{"type":14,"value":761},{"type":9,"tag":632,"props":798,"children":799},{},[800,805,809],{"type":9,"tag":659,"props":801,"children":802},{},[803],{"type":14,"value":804},"OpenAI, L.L.C. / OpenAI Ireland Ltd",{"type":9,"tag":659,"props":806,"children":807},{},[808],{"type":14,"value":792},{"type":9,"tag":659,"props":810,"children":811},{},[812],{"type":14,"value":761},{"type":9,"tag":10,"props":814,"children":815},{},[816],{"type":14,"value":817},"Third-party providers named in a proposal, quote, order or statement of work for a particular Service (such as AI model providers) are also Sub-processors for that Service, under section 5.",{"type":9,"tag":46,"props":819,"children":821},{"id":820},"contact",[822],{"type":14,"value":823},"Contact",{"type":9,"tag":10,"props":825,"children":826},{},[827,829,833],{"type":14,"value":828},"If you have any questions about this DPA, please contact us at ",{"type":9,"tag":22,"props":830,"children":831},{"href":39},[832],{"type":14,"value":42},{"type":14,"value":834},", or write to Grizzlyware Ltd, C/O Linggard And Thomas Ltd, Kew An Lergh, Stret Mygthern Arthur, Nansledan, Cornwall, United Kingdom, TR8 4UX.",1793965500858]