tempora
ES EN
Join the list
Legal

Data Processing Agreement (DPA)

Last updated: July 2026 v0.1 Draft · pending legal review
Summary in 5 lines
  • Draft processor terms for the closed Spain pilot.
  • Applies when Tempora processes tenant and document data for customers.
  • Commercial launch is blocked until the Spanish DPA and sub-processor list are signed.
  • Processors cover EU hosting/storage, Stripe, e-signature, IDV, mail and AV/OCR/LLM only if enabled.
  • Contact: tempora@mindburn.org.

English is a translation for convenience. The Spanish version prevails.

Status

This DPA is a working draft pending partner-lawyer review. The pilot cannot accept real documents until the controller identity, final sub-processor names, locations, transfer safeguards and signed DPA are complete.

Sub-processors

The intended closed-pilot processors are EU hosting and database, EU S3-compatible object storage, Stripe for payments, Signaturit or equivalent e-signature provider, Didit or equivalent IDV provider, transactional email provider, antivirus/OCR if enabled, LLM provider only if assisted extraction is enabled, the partner law firm for document review, and the brokerage only if insurance is requested. Formspree/Tally are not used for launch.