Data Processing Agreement (DPA)
Our Data Processing Agreement details how SecuProbe processes personal data on your behalf as a data processor under the GDPR. This document is required for GDPR compliance when you use SecuProbe to process data of EU residents.
DPA document
Version 1.0 — Last updated: January 1, 2026
About our DPA
The DPA is automatically incorporated into your agreement with SecuProbe when you use our services to process personal data. The DPA includes:
- Description of processing activities
- Security measures implemented by SecuProbe
- Sub-processor list and commitments
- Data subject rights procedures
- Breach notification procedures
- Data deletion and return procedures
Because the DPA is incorporated automatically, there is nothing to sign separately. Download the document to keep a copy in your own compliance records, and send any question about it to the address below.
Who is responsible for what
When you scan a website with SecuProbe, you are the data controller: you decide which domains are tested and for what purpose. SecuProbe acts as the data processor and handles personal data only on your documented instructions, to deliver the service you subscribed to.
Scan results describe technical findings about a site. They may contain personal data when the site itself exposes some, for example an email address in a public file. SecuProbe applies the same protection to those results as to account data: access limited to your account, encryption in transit, and deletion on request.
SecuProbe processes data in the European Union. The sub-processors involved in delivering the service are listed in the agreement, together with the commitments that apply to them.
You can export or delete your data at any time from your account settings. When your account is closed, personal data is deleted within the retention periods stated in the privacy policy.
For questions about our DPA or GDPR compliance, contact us at: dpo@secuprobe.io