🇪🇺 GDPR ARTICLE 28 COMPLIANT
Data Processing Agreement (DPA)
Effective Date: August 31, 2026 · Standard Contractual Clauses (SCCs) & EU Data Residency
📍
EU Data Residency
Hosted in Cloudflare EU (Frankfurt / Western Europe). Zero replication to US servers.
🛡️
Zero Model Training
Customer chat logs and knowledge base articles are NEVER used to train foundation AI models.
✍️
Instant DPA Execution
Automatically active with Terms. Counter-signed PDF available via dpa@zeqalune.com.
1. Parties and Scope
This Data Processing Agreement ("DPA") governs the processing of personal data by Zeqalune Inc. / Zeqalune Technology Solutions ("Processor") on behalf of the subscriber ("Controller") under the General Data Protection Regulation (EU GDPR 2016/679).
2. Purpose & Nature of Processing
Zeqalune processes personal data solely to provide real-time AI customer support, live chat widgets, multi-channel ticketing, and Lune AI knowledge base indexing as instructed by the Controller.
3. Authorized Sub-Processors
| Sub-Processor | Role & Service | Location | Certifications |
|---|---|---|---|
| Cloudflare Inc. | Primary Edge Hosting, D1 SQL, R2 Storage, WAF | European Union (Frankfurt / Western Europe) | ISO 27001, SOC 2 Type II |
| Stripe Payments Europe Ltd. | Billing & Subscription Processing | Ireland (EU) | PCI DSS Level 1 |
| Resend Inc. | Inbound/Outbound Support Alerts | EU / DPF Certified | SOC 2 Type II, TLS 1.3 |
4. Technical & Organizational Security Measures (TOMs)
- In-Transit Encryption: TLS 1.3 with Perfect Forward Secrecy across all edge connections.
- At-Rest Encryption: Multi-tenant D1 databases and R2 objects encrypted via AES-256.
- Logical Tenant Isolation: Strict workspace scoping ensuring complete data segregation.
- Zero Model Training: Customer data is NEVER fed into LLM training pipelines.
5. How to Request a Counter-Signed DPA
If your legal or procurement department requires a signed bilateral PDF copy with your corporate entity name:
Request Countersigned PDF Agreement
Email dpa@zeqalune.com →Send your legal entity details and authorized signatory to dpa@zeqalune.com.