Data Processing Agreement
Enterprise customers can execute a Data Processing Agreement (DPA) with Chatevo to meet GDPR, UK GDPR, and procurement security requirements.
What the DPA covers
Section titled “What the DPA covers”| Section | Contents |
|---|---|
| Roles | You as Controller; Chatevo as Processor |
| Subject matter | AI assistant hosting, KB storage, conversation processing |
| Duration | Term of the Enterprise agreement |
| Subprocessors | List with 30-day objection window for new subprocessors |
| Security measures | TLS, encryption at rest, access controls, audit logs |
| Data subject rights | Assistance with access, deletion, portability requests |
| Breach notification | Notification within 72 hours of confirmed breach |
| International transfers | Standard Contractual Clauses (SCCs) where applicable |
| Deletion | Return or delete data on contract termination |
How to request
Section titled “How to request”- Email support@chatevo.ai from your organization admin address.
- Subject:
Enterprise DPA request — [Company name] - Include: legal entity name, address, signatory contact, estimated ARR tier.
We return a pre-signed DPA PDF or your paper via DocuSign within 5 business days.
Prerequisites
Section titled “Prerequisites”| Requirement | Detail |
|---|---|
| Plan | Pro or Enterprise (annual contract) |
| Admin contact | Verified organization owner |
| Use case summary | Brief description for subprocessor assessment |
Included security exhibits
Section titled “Included security exhibits”The DPA references Chatevo’s security documentation:
Custom terms
Section titled “Custom terms”Enterprise customers may negotiate:
- Customer-managed encryption keys (CMK)
- Extended audit log retention
- Dedicated subprocessor review cycle
- EU-only data residency (availability varies by region)
Contact your account manager or support@chatevo.ai for amendments.