Data Processing Addendum
Effective Date: April 19, 2026
Last Updated: April 19, 2026
A Data Processing Addendum (DPA) formalises the roles and obligations between you (the data controller) and Vouchley (the data processor) when you run verifications on personal data of your own users.
Availability
Our DPA covers the commitments in Article 28 of the GDPR, including:
- Subject matter, nature, and duration of processing
- Categories of data subjects and personal data
- Confidentiality and security of processing
- Sub-processor disclosure and approval (see the list in our Privacy Policy)
- Data-subject rights support (access, deletion, export)
- International transfer mechanisms (Standard Contractual Clauses)
- Breach notification within 72 hours
- Audit rights on reasonable notice
How to request it
Because we sign DPAs one customer at a time during this early phase, we don’t yet publish a click-through version. Email privacy@getrevlio.com from the address on your Vouchley account and we’ll send the current PDF, pre-signed, within two business days. We’re also happy to counter-sign your own template if it’s substantively equivalent.
Self-serve version
We’ll publish a self-serve, click-to-accept DPA here once we have enough business customers to justify the review overhead. Until then, thanks for your patience.