Data Processing Agreement
Zeropaste acts as a data processor when you use the Service to process invoice documents. This Data Processing Agreement (DPA) sets out the terms under which we process personal data on your behalf, in accordance with Article 28 of the GDPR.
The DPA covers:
- What personal data we process and why
- How long we retain it
- Our deletion policy (original invoice files: within 24 hours or immediately on user request)
- Sub-processors we use and where they are located
- Your rights as data controller
- Technical and organisational security measures
If your procurement process requires a countersigned copy, download the DPA here first and use it as the current standard processor agreement.
Full security and data handling details →