Data Processing Agreement

Last updated: 2026

1. Purpose

This Data Processing Agreement ("DPA") sets out the terms under which Beyond Account processes personal data on behalf of our customers, in compliance with applicable data protection laws.

2. Roles

The customer is the data controller. Beyond Account acts as a data processor, processing personal data only as instructed by the customer.

3. Processing Instructions

Beyond Account will process personal data only for the purpose of providing the agreed services, and not for any other purpose without the customer’s prior written consent.

4. Sub-processors

We use trusted sub-processors for hosting, payment processing, and analytics. A current list is available upon request.

5. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, and destruction.

6. Data Subject Rights

We will assist the customer in responding to data subject requests, including access, rectification, erasure, and portability requests.

7. Audit & Compliance

We make available information necessary to demonstrate compliance with this DPA and allow for audits by the customer or a mutually agreed third party.

8. Contact

For DPA questions, email hello@beyondaccount.com.