Data Processing Agreement
How Zyflox processes personal data contained in the documents you submit, and the commitments we make as your data processor.
1. Scope and roles
This DPA applies wherever Zyflox processes personal data on your behalf. You act as the data controller and Zyflox acts as the data processor for the documents you submit.
2. Processing instructions
Zyflox processes personal data only on your documented instructions, including extracting, storing and exporting structured data as configured in your account.
3. Confidentiality
Personnel authorized to process personal data are bound by confidentiality obligations and access data only as needed to operate the service.
4. Security measures
Zyflox applies technical and organizational measures including AES-256 encryption at rest, TLS 1.2+ in transit, role-based access controls, and complete audit logging.
5. Sub-processors
Zyflox may engage sub-processors under written agreements imposing equivalent data-protection obligations. A current list of sub-processors is available on request.
6. Data subject requests and deletion
Zyflox assists you in responding to data-subject requests and, on termination, deletes or returns personal data and extracted results according to your instructions.
7. Contact
For DPA matters, contact privacy@zyflox.com.