Data Processing Agreement

1. Scope

This DPA applies where VedaSign processes personal data on behalf of the customer in connection with the VedaSign document signing service.

2. Data We Process

On your behalf we process: names and email addresses of document recipients, signed document content, IP addresses and timestamps in audit trails.

3. Our Obligations

• Process data only on your documented instructions
• Ensure data is stored on secure cloud infrastructure
• Implement appropriate technical and organizational security measures
• Assist you in responding to data subject requests
• Delete or return data upon termination of the service

4. Security Measures

• 256-bit AES encryption at rest
• SSL/TLS encryption in transit
• Access controls and authentication
• Regular security monitoring

5. Data Retention

We retain your data for the duration of your subscription. Upon cancellation you have 7 days to download your documents. After 7 days all data is permanently deleted.

6. Governing Law

This DPA is governed by the laws of the United States.

Contact

privacy@vedasign.us