Data Processing Agreement

For customers processing personal data under GDPR/CCPA, Borah Digital Labs offers a signed DPA.

Roles. You are the controller; Sanitext is a processor acting on your instructions (your API calls).

Data minimization. We process request text transiently in memory and do not retain it; we store only request metadata. This materially limits the scope of processed personal data.

Subprocessors. Cloudflare and Stripe. EU data residency and custom retention terms are available on Enterprise.

Request a signed DPA: raul@borah.agency.