Data processing agreement
Last updated: 1 October 2026 · version 2.0[PLACEHOLDER] The structure and summaries have been drafted for the design. The final legal text will be supplied and reviewed by a lawyer.
1. Subject matter
Brightness processes personal data solely on behalf of the customer, for the purpose of providing SparkleCloud. [PLACEHOLDER]
2. Security
Encryption in transit and at rest, role-based access, two-factor authentication and annual penetration tests. [PLACEHOLDER: reference to security annex]
3. Sub-processors
We only work with sub-processors within the EU. We give notice of changes at least 30 days in advance. [PLACEHOLDER: list]
4. Data breaches
We report a data breach within 24 hours of discovery, with all the information you need for your own notification. [PLACEHOLDER]
5. End of the agreement
When the agreement ends, you can export all your data. We then delete it within 90 days. [PLACEHOLDER]
Questions about this document? Email privacy@sparklecloud.ai [PLACEHOLDER] or use the contact form.