Data processing agreement

DPA for Aiva

If your organisation is a data controller and uses Aiva to process personal data on your behalf (for example customer or lead records passing through your workspace), VERLOX Ltd acts as your data processor under UK GDPR. This page explains what that covers and how to get a signed copy.

What a DPA with VERLOX covers

  • The subject matter, duration, and nature of the processing: operating the Aiva workspace and AI workers you configure, and the connections you explicitly authorise (see our privacy policy for the full detail on Google and other connected-account data).
  • Processor obligations: only processing data on your documented instructions, confidentiality, security measures, breach notification, and assistance with data subject requests.
  • Sub-processors: the categories listed in our privacy policy (payments, AI model providers, email delivery, hosting, and optional integrations like Google or Microsoft you connect yourself).
  • International transfer safeguards, where any sub-processor operates outside the UK/EEA.

How to get a signed DPA

Email [email protected] with your company name and the email address on your Aiva workspace. We will send the current DPA for signature.

Related documents

See our privacy policy for how personal data is collected and used, our terms of service for the agreement covering your use of Aiva generally, and our security page for the current published security summary.

Request a DPA Privacy policy