Data Processing Agreement Requests

Status: v1.4 process. Effective at general availability.

Organizations that require a Data Processing Agreement may contact privacy@arbitersec.com with:

• legal entity and registered address;
• contracting contact and privacy contact;
• expected plan and user count;
• categories of data and data subjects;
• required transfer mechanism or jurisdictional addendum; and
• requested security or subprocessor documentation.

Do not include customer binaries, credentials, production evidence, or special-category personal data in the request. We will verify the requester and respond with the current DPA or identify terms requiring review. A requested DPA is not effective until signed by authorized representatives.

Security questionnaires are handled proportionately for the selected plan. Penetration-test reports, provider contracts, internal secrets, and information that would weaken tenant isolation are not distributed without an appropriate confidentiality and review process.

Last reviewed: 2026-07-19.