Legal · GDPR Art. 28

Data Processing Agreement(DPA)

If JSNH Engine Lab processes personal data on behalf of your organization, we need to sign a DPA under GDPR Art. 28. This document describes the process and minimum required content.

Last updated: 2026-05-09

When does it apply?

The DPA applies when you use JSNH Engine Lab modules to process personal data of your end users. For example:

  • →email-validator, disposable-email — processing your users' emails
  • →pii-detector — detecting personal data in your users' content
  • →ip-geolocation, ip-intelligence — processing your users' IPs
  • →resume-parser — processing CVs and employment data of candidates

How to sign the DPA

01

Request the DPA

Send an email to [email protected] with subject "DPA Request" and include your company name and country.

02

Review and sign

We send you the standard DPA in PDF. You can sign it digitally (DocuSign, HelloSign) or on paper.

03

Activation

Once signed by both parties, the DPA becomes active. We send you a signed copy by email.

DPA Content

Our standard DPA covers the following elements required by GDPR Art. 28:

✓Identification of controller (client) and processor (JSNH Engine Lab)
✓Categories of personal data processed
✓Purposes and duration of processing
✓List of sub-processors (updated at /legal/sub-procesadores)
✓Technical and organizational measures (TLS encryption, access controls)
✓Breach notification within ≤ 72 hours
✓Data subject rights and client assistance
✓Data return or deletion upon contract termination
✓Audit procedure
✓International transfers and SCCs if applicable

Sub-processors

We maintain a public and updated list of all sub-processors we use to provide the service.

Legal contact

To request the DPA, Enterprise-specific modifications, or any data protection inquiry:

[email protected]

Usual response time: 1-2 business days.