This DPA forms part of the Terms of Service for business customers processing personal data on behalf of others.
1. Roles
You are the Controller. VidTranscriber is the Processor of any personal data contained in audio or transcripts you submit.
2. Sub-processors
Listed in our Privacy Policy section 3. We notify customers of changes 30 days in advance.
3. Security
Transport encryption (TLS 1.2+), at-rest encryption for R2/D1, IP-hashed audit trail, no human access to customer audio without authorized incident response.
4. Data subject rights
We assist with access, correction, and deletion requests within 30 days of receipt.
5. Breach notification
We notify the Controller within 72 hours of a confirmed breach involving Controller data.