Last updated: 2026-04-20
Our Data Processing Addendum (DPA) supplements the PureBox Terms of Service and governs the processing of personal data by PureBox on behalf of our customers acting as controllers. The DPA incorporates the EU Standard Contractual Clauses (SCCs) from Commission Implementing Decision (EU) 2021/914, Module Two (Controller-to-Processor), for any international transfers.
The linked template reflects our current terms. It is provided as a stub pending countersignature - if you need an executed copy for your compliance records, email support@pureboxai.com with your company details and we will countersign.
Any customer whose use of PureBox involves personal data of EU/UK data subjects, or who is otherwise subject to GDPR, UK GDPR, the California Consumer Privacy Act, or similar data protection laws, should have a signed DPA in place with us. Individual users on our consumer plan are covered by the DPA terms referenced in our Privacy Policy.
Our current subprocessors are listed at /subprocessors. The DPA provides a general authorisation for us to engage subprocessors subject to the notification procedure described on that page.