Skip to main content

Data Processing Agreement (DPA)

The WebSocket version delivers messages through WordPlus Cloud's realtime servers, and WordPlus Cloud processes a limited set of your site users' personal data on your behalf while doing it. Its Data Processing Agreement under Article 28 of the GDPR is part of the WordPlus Cloud terms, so it applies to every site using the WebSocket version without anything to sign or send.

Read the Data Processing Agreement →

When a DPA applies

A DPA is relevant only when your site uses WordPlus Cloud's realtime servers with the WebSocket version. The free / AJAX version and a self-hosted realtime server send nothing to WordPlus Cloud, so no DPA is needed for them.

Get a copy signed by both sides#

Some organisations need a signed copy for their records. You can make one yourself, at any time:

  1. Sign in to your WordPlus Cloud account and open Data processing
  2. Enter your organisation's legal name, address and country, and the name and title of the person signing
  3. Confirm, and download the PDF

The PDF holds the agreement as it is in force that day, signed electronically by you and by WordPlus Cloud. Every copy you make stays in your account to download again.

What it covers#

  • What is processed and for how long: the routing data realtime delivery needs, calls, push notifications and Better Messages Cloud AI, each with how long it is kept. Message content is not stored on the realtime servers, and what passes through them is encrypted with keys they never get
  • Where the data is: the main servers, which hold the data, are in the European Union (Frankfurt, Germany, with backups in Strasbourg, France). Group calls and live streams run on media servers in several regions, which relay audio and video and hold no data
  • Sub-processors: listed in the agreement, with at least 30 days' notice before one is added or replaced and your right to object
  • Breaches: you are told within 48 hours of WordPlus Cloud becoming aware of one
  • International transfers: WordPlus Cloud is run from Ukraine, so the EU Standard Contractual Clauses (Module Two, or Module Three when you are a processor yourself) are part of the agreement, with the UK Addendum and the Swiss adaptations
  • Deletion, help with your users' requests, and audits

This page summarises the agreement and is not legal advice: the agreement at wordplus.cloud/dpa is what applies.

See also#