Home / Legal / Data processing addendum

Data processing addendum

Last updated June 2026

This is a plain-language template provided for transparency. It is not legal advice and is being finalized with counsel. The binding terms are those in your signed agreement.

Roles

For personal data you provide as part of an engagement, you are the controller and Creoglyph Technologies is the processor. We process it only on your documented instructions.

Security measures

Encryption at rest and in transit, per-workspace isolation, least-privilege access, and audit logging of page actions, model calls, and key access.

Subprocessors

We use a limited set of subprocessors for hosting and infrastructure, listed on the Subprocessors page. We notify you of material changes.

Data residency

EU data residency is available and is the default for EU customers. Data location is set at kickoff.

Your rights

We assist you in responding to data-subject requests and in meeting your GDPR obligations, including erasure and export.

Signing

A full DPA is executed alongside your order form. Contact privacy@creogen.ai to receive it.