Skip to content
DeployMonkey logo DeployMonkey

Last updated: February 26, 2026

Data Processing Agreement

This Data Processing Agreement ("DPA") supplements the Terms of Service and applies when DeployMonkey processes personal data on your behalf as a data processor under the General Data Protection Regulation (GDPR).

1. Definitions

  • Controller: You (the customer), who determines the purposes and means of processing personal data
  • Processor: DeployMonkey, which processes personal data on behalf of the Controller
  • Personal Data: Any information relating to an identified or identifiable natural person

2. Scope of Processing

DeployMonkey processes the following data on your behalf:

  • Server connection credentials (encrypted)
  • Odoo instance configuration data
  • Backup metadata
  • Deployment logs

We do not access or process the contents of your Odoo databases.

3. Our Obligations

  • Process personal data only on your documented instructions
  • Ensure all personnel with access are bound by confidentiality
  • Implement appropriate technical and organizational security measures
  • Assist you in fulfilling data subject access requests
  • Delete or return all personal data upon termination
  • Provide information necessary to demonstrate compliance

4. Sub-processors

We use a limited number of sub-processors. See our Subprocessor List for the current list. We will notify you of any changes to sub-processors 30 days in advance.

5. Data Transfers

All data is stored and processed within the European Union. If data transfer outside the EU is required, we ensure adequate safeguards (Standard Contractual Clauses) are in place.

6. Security Measures

  • AES-256 encryption for all sensitive data at rest
  • TLS encryption for all data in transit
  • Access controls and role-based permissions
  • Regular security assessments
  • Incident response procedures

7. Breach Notification

In the event of a personal data breach, we will notify you without undue delay and within 72 hours of becoming aware of the breach.

8. Contact

For DPA-related inquiries, contact us at [email protected].

To request a signed copy of this DPA, email us with your account details.