Every paying customer is entitled to a signed Data Processing Agreement at no extra cost. The pre-signed template below covers Article 28 obligations, Standard Contractual Clauses for transfers, and the subprocessor list as Annex B.
You are the data controller; LemRank is the data processor. We process customer data only on your documented instructions.
Personal data leaving the EEA is covered by the European Commission Standard Contractual Clauses (2021 modules) plus a Transfer Impact Assessment on request.
We commit to the technical and organisational measures described in the Security overview, with material changes notified in advance.
The Subprocessors page is incorporated into the DPA. We notify you of changes and you retain the right to object.
We assist you in responding to access, deletion, rectification, and portability requests from your end users within the timelines GDPR requires.
You may request an annual audit summary covering controls, incidents, and subprocessor changes. On-site audits are available to enterprise customers under NDA.
Download the pre-signed PDF below, fill in your company details and signature, and return one copy to legal@lemrank.com. We countersign and return within 2 business days.
If your procurement team requires their own template, send it to legal@lemrank.com. We typically respond with comments within 5 business days.
Once signed, the DPA governs all customer data processed for your account, including data created after the signing date.
The DPA does not change what we do with your data — it formalises it. Specifically:
This page is a summary, not the contract. The signed DPA controls. Read our Privacy Policy and Terms of Service for the full picture.