DOCUMENT VERSION: 2.0LAST REVISED: March 10, 2026
Data Processing Addendum (DPA)
EXECUTIVE SUMMARY: Our DPA incorporates standard contractual clauses (SCCs) to satisfy European Union GDPR Article 28 data controller/processor compliance.
1. Scope and Applicability
This Data Processing Addendum applies whenever personal data governed by GDPR, UK GDPR, or Swiss FADP is processed by Autvy in the provision of the service.
2. Security Safeguards
Autvy implements technical and organizational measures to ensure security, including Ed25519 cryptographic signing, TLS 1.3 encryption in transit, AES-256 encryption at rest, and strict least-privilege host process isolation.
3. Incident Notification SLA
In the event of a verified security incident affecting customer data, Autvy will notify impacted customers in writing within forty-eight (48) hours of discovery.