Standard DPA for customers who process personal data through Run Pilots. This document is a good-faith starting point. It must be reviewed by qualified legal counsel for your entity and jurisdiction before you rely on it.
Roles
You are the controller of any personal data in the accounts you process; Run Pilots is the processor. This DPA applies where GDPR, UK GDPR or similar laws apply.
Processor obligations
We process personal data only on your documented instructions, apply the technical and organizational measures described in the Security page, assist with data subject requests, and notify you of breaches without undue delay.
Sub-processors and transfers
You authorize our current sub-processors list. We give notice before adding new ones. International transfers rely on standard contractual clauses or equivalent safeguards.
Execution
To execute this DPA, email privacy@runpilots.com with your entity details and we will return a countersigned copy.