---
title: "Data Processing Addendum (DPA)"
description: "Ossvy's data processing addendum for business customers: roles, security measures, sub-processors and data transfers under GDPR and KVKK."
canonical: "https://ossvy.com/legal/data-processing-addendum"
lang: "en"
dir: "ltr"
dateModified: "2026-10-14"
type: "legal"
effectiveDate: "2026-11-01"
alternates:
  tr: "https://ossvy.com/tr/yasal/veri-isleme-sozlesmesi.md"
  ar: "https://ossvy.com/ar/qanuni/itifaqiyat-muaalajat-al-bayanat.md"
source: "Ossvy (https://ossvy.com)"
---

# Data processing addendum

Breadcrumb: [Home](https://ossvy.com/index.md) › Data processing addendum

This addendum applies when Ossvy processes personal data on behalf of a business customer as part of the Ossvy platform.

## Roles

The customer is the controller and Ossvy is the processor. Ossvy processes personal data only on the customer's documented instructions.

## Security

Ossvy keeps appropriate technical and organisational measures, including access control, encryption in transit and regular backups, and limits access to staff who need it.

## Sub-processors and transfers

Ossvy uses a small number of sub-processors for hosting and email and tells customers before adding new ones. Transfers outside the customer's country follow the safeguards required by GDPR and KVKK.

## Requests

To sign the addendum or ask about it, contact us through our [contact page](https://ossvy.com/contact.md).

Source: https://ossvy.com/legal/data-processing-addendum · Last updated: 2026-10-14