Data Processing Agreement

Compliance and data processing terms for enterprise customers.

Overview

This Data Processing Agreement ("DPA") forms part of the Master Services Agreement or Terms of Service between Corely and the customer. It governs the processing of personal data on behalf of our customers in accordance with GDPR, CCPA, and other applicable privacy laws.

Data Processing Roles

Corely acts as a Data Processor for the organizational data indexed through our integrations, and the Customer acts as the Data Controller.

Subprocessors

We use a limited set of strictly vetted subprocessors to provide our service, primarily for secure cloud hosting and essential infrastructure. A full list of our current subprocessors is available upon request.

Security and Compliance

We commit to maintaining robust technical and organizational security measures to protect your data, including SOC 2 compliance, end-to-end encryption, and routine external penetration testing.