Back to Home

Data Processing Agreement

Last Updated: August 2026

1. Purpose

This Data Processing Agreement (DPA) governs the processing of personal data by DCS on behalf of the Customer, ensuring compliance with the GDPR and UK GDPR.

2. Security Measures

DCS implements technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, or unauthorized access: row-level tenant isolation in the database, encryption of stored credentials, role-based access, an append-only audit log, and encrypted backups that are restore-tested. These measures are modelled on the controls the SOC 2 framework describes. DCS has not been audited against SOC 2 or any other certification and makes no certification claim; when an auditor's report exists it will be linked here.