Data Processing Agreement

This page is a summary for customers who require a Data Processing Agreement (DPA) as part of GDPR, CCPA, or other data protection compliance obligations. It is not a substitute for a negotiated DPA or Master Services Agreement (MSA). B2B customers who require a formal, signed DPA should contact us to discuss terms.

When a DPA applies

A DPA is typically required when you are a "controller" under GDPR or similar law and Quantyra Labs LLC acts as a "processor" on your behalf — for example, when you submit personal data (email addresses, phone numbers) through the API for processing.

Our role

For API validation requests, DNC screening and connected CRM contacts, Quantyra Labs processes the data you submit solely to deliver the result. We do not use your customers' email addresses or phone numbers for our own purposes beyond operating the Service and maintaining required records, as described in our Privacy Policy. Registry files you upload are used only for your account's checks.

Subprocessors

We engage subprocessors to assist with Service delivery. See our Subprocessors page for current categories. Material changes to subprocessors will be reflected there.

How to request a DPA

Enterprise or regulated customers who require a formally executed DPA should contact us at . Please include your company name, jurisdiction, and any specific compliance framework (e.g. GDPR, CCPA, HIPAA) you need addressed. We will respond as quickly as practical.

This page is informational only and does not create any contractual obligation. Binding data processing commitments require a separately executed agreement.