Data Processing Agreement
Last Updated: January 24, 2026
This Data Processing Agreement ("DPA") forms part of the Inventro Terms of Service.
1. Roles
Tenant is the Data Controller. Inventro is the Data Processor.
2. Processing Scope
Inventro processes personal data solely to provide the Services and in accordance with documented Tenant instructions.
3. Security Measures
Inventro implements:
- Encryption in transit and at rest
- Access control and authentication
- Tenant data isolation
- Audit logging
4. Subprocessors
Inventro may engage subprocessors under contractual safeguards and will provide notice of material changes.
5. Breach Notification
Inventro will notify Tenant without undue delay upon confirmation of a personal data breach.
6. International Transfers
Data may be processed in Canada or the United States with appropriate safeguards in place.
7. Deletion
Upon termination, data will be deleted or returned unless retention is legally required.