Data Processing Addendum
For customers whose use of Elevate involves personal data subject to the GDPR
Where a customer's use of the Elevate platform involves personal data protected by the EU or UK GDPR, that customer is the controller and Elevate SaaS, Inc. is the processor. A Data Processing Addendum (DPA) governs that relationship and supplements our Terms of Service and Privacy Policy.
What the addendum covers
- The subject matter, duration, nature and purpose of the processing, and the categories of data subjects and personal data involved.
- Elevate's obligations as processor: processing only on documented instructions, confidentiality of personnel, security measures, and assistance with data subject requests.
- Engagement of sub-processors, the authorisation that applies to them, and notice of changes.
- Assistance with data protection impact assessments and with notification of personal data breaches.
- Deletion or return of personal data at the end of the engagement.
- Audit and information rights.
- International transfers, including the Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum.
- The controller's own obligations, including the lawfulness of the instructions it gives us.
Requesting the addendum
We will provide the current DPA for review or signature on request. Email privacy@elevatesaas.com with your company name and the Elevate products in scope, and we will send the executable document together with the sub-processor list and the transfer mechanism that applies to you.
If you already have a signed DPA with Elevate, it remains in force on its own terms; this page does not amend it.
Contact details
Elevate SaaS, Inc.
Attn: Privacy Team
3990 Westerly, Suite 270
Newport Beach, CA 92660, USA
privacy@elevatesaas.com
www.elevatesaas.com