Data Processing Agreement
Last updated: 2026-06-01
A GDPR-compliant Data Processing Agreement is available on request for all paid plans.
Roles
You are the data controller; Citadea acts as processor for the data you host on the platform.
Security & residency
Encryption at rest with customer-managed keys, EU residency, and breach notification within 72 hours.
Request a copy
Email hello@citadea.com to receive the current DPA and subprocessor list.