Data Processing Addendum
Last updated July 2026
RepCue acts as a data processor for the customer data you entrust to it. This page summarizes the DPA structure, not the binding text. The executable, lawyer-reviewed addendum is provided on request during procurement.
Roles
You are the controller of your organization's and prospects' personal data; RepCue is the processor, acting only on your documented instructions as set out in the order form and this addendum.
Subprocessors
We use a vetted list of subprocessors (model, ASR, and infrastructure providers) under terms that restrict use of your data; we do not permit training on it. The current list is available on request; material changes are notified in advance.
International transfers
Standard Contractual Clauses where applicable. An EU data-residency option (including EU-region ASR/LLM endpoints) is planned for the Enterprise tier as part of the EU launch.
Security & breach notification
Technical and organizational measures per our security posture, with contractual breach-notification timelines. Request the signed DPA and our current security documentation from your account contact. SOC 2 Type I is underway, not yet certified.
Questions? Get in touch or return to the homepage.