Legal

Data Processing Agreement.

Our processor commitments, the EU storage region, sub-processors, and the residency terms you can sign. Built to pass a procurement review.

The point of a DPA is that it survives a procurement review. Pyng's is being built to state, in writing, the things "provable EU" actually requires: our commitments as a processor, the EU region where customer data is stored, the sub-processors we rely on, and the residency terms you can sign — so EU residency is a contractual commitment rather than a marketing line. Tenant isolation by row-level security, data-subject rights, and breach notification are part of the same document.

A note on this page: this is framing copy, not the executable agreement. The DPA is being reviewed by counsel and will be provided as customer data processing goes live — and we won't name a sub-processor as live before it is. If your procurement needs to review a draft before you commit, say so through the contact page and we'll share it as it firms up.

Last updated June 2026

Pre-launch · early access

Questions about how we handle data?