Data processing · public sample

A DPA starts with a real processor.

The public sample uses fictional, browser-local material and does not offer connected customer processing. This page does not offer, execute, or substitute for a data processing addendum.

Required agreement contents

• Controller and processor identities, instructions, data categories, affected people, and processing purposes.
• Security measures, confidentiality, subprocessors, regions, transfer mechanism, audit rights, and breach-notification process.
• Retention, return/deletion timing, connector and media-provider handling, and verified request contacts.

What changes before connected workspaces

Storycairn must bind the legal operator, disclose the deployed subprocessor and retention posture, and provide an approved agreement through a verified channel. Until then, the only supported evaluation material is fictional sample content.