Spine

Data Processing Agreement

Last updated 2026-04-27.

What a DPA is

A Data Processing Agreement is the contract that governs the relationship between you (the controller of the personal data you put into Spine) and us (the processor that handles that data on your instructions). The GDPR makes a written DPA mandatory for any business processing personal data on a customer's behalf (Art. 28(3) GDPR). The CCPA, the UK GDPR, and most other modern privacy regimes require an equivalent.

Our DPA template

Our standard DPA template is based on the EU Standard Contractual Clauses (Decision 2021/914) for controller-to-processor transfers, with the UK International Data Transfer Addendum and a CCPA service provider addendum attached. It covers:

  • Subject matter, duration, nature, and purpose of processing
  • Categories of data subjects and categories of personal data
  • Documented instructions and processor obligations under Art. 28(3) GDPR
  • Confidentiality, security measures, and breach notification (within 72 hours)
  • Subprocessor flow-down (see /legal/subprocessors)
  • Data subject rights assistance, audits, and end-of-service deletion
  • International transfer mechanism and Schrems II supplementary measures

How to request and sign

Email support@rodyr.com with the subject DPA request. Include your legal entity name, registered address, billing email, and the Spine account or org slug. We will return a counter-signed PDF within five business days. We will sign your DPA template if it is materially equivalent to ours; otherwise we will redline.

A draft template is available on request. (A downloadable PDF will appear at /legal/dpa.pdf once finalised; today, email is the preferred route.)

Already have a DPA with us?

Customers on the Team tier and above who have signed our DPA are bound by it as a single integrated agreement with these published terms. The latest set of subprocessors and security measures referenced there is the version published on this site.

Roles and contact

Controller: you. Processor: Rodyr, Inc., 1111B S Governors Ave Suite 55111, Dover, DE 19904, United States. Data-protection contact: support@rodyr.com.

Spine by Argonode Studio · A brand of Rodyr, Inc. · Registered office: 1111B S Governors Ave Suite 55111, Dover, DE 19904, United States.

Data Processing Agreement — Spine · Spine