Data processing agreement
This Data Processing Agreement (DPA) supplements the Endorser Terms of Service and governs Endorser's processing of personal data on behalf of Customer.
Roles
Customer is the data controller. Endorser is the data processor. Sub-processors are the processors of Endorser.
Sub-processors
Endorser uses the following sub-processors:
- Amazon Web Services (UK) — hosting, eu-west-2.
- Stripe Payments UK Ltd — payment processing for subscriptions only.
- An integrated UK IDV provider (named in the customer onboarding letter) — identity verification.
International transfers
No personal data is transferred outside the United Kingdom under this DPA.
Security measures
Endorser implements the technical and organisational measures described at endorser.co.uk/security, which form part of this DPA.
Sub-processor changes
Endorser will notify Customer at least 30 days before adding a sub-processor. Customer may object on reasonable grounds; if Endorser cannot accommodate the objection, either party may terminate the affected service.
Data subject requests
Endorser assists Customer in responding to data-subject requests. Requests received directly by Endorser are forwarded to Customer within five working days.