Data processing agreement (DPA)

Subject matter and duration: Sygnau processes personal data on behalf of the customer while the service is active.

Data types: identity, contact, minors where applicable, special categories if configured by the customer, signatures and documents.

Data subjects: participants, legal representatives, customer users, signers.

Purpose: provide the service only; no incompatible own purposes.

Customer instructions via the product and documentation.

Confidentiality and security (RLS, encryption in transit, audit).

Sub-processors as listed publicly.

International transfers with safeguards.

Assistance with data-subject rights and incidents after human review.

Return/deletion on termination.

Append-only audit trail.