Data Processing Agreement (DPA)

Last updated: June 13, 2026

This Data Processing Agreement ("DPA") forms part of the Terms of Service between Zubmit and the Customer.

1. Definitions

In this DPA, "Personal Data", "Data Controller", "Data Processor", "Data Subject", and "Processing" shall have the meanings given to them in the GDPR.

2. Processing of Personal Data

Zubmit will process Personal Data only on documented instructions from the Customer, unless required to do so by applicable law.

3. Security

Zubmit shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

4. Sub-processors

The Customer grants Zubmit general authorization to engage sub-processors, subject to Zubmit providing notice of any intended changes concerning the addition or replacement of sub-processors.