Data Processing Addendum
Last updated: September 30, 2026
This Data Processing Addendum forms part of the Terms of Service between Arcline and the customer. It governs the processing of personal data by Arcline on behalf of customers.
1. Roles
The customer is the data controller. Arcline acts as a processor, processing personal data only on documented instructions from the customer.
2. Subprocessors
Arcline uses the following subprocessors to provide the service:
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services | Cloud infrastructure | US, EU |
| Google Cloud Platform | Backup and analytics | US, EU |
| Cloudflare | DDoS protection and DNS | Global |
| Stripe | Payment processing | US |
3. Security measures
Arcline maintains encryption in transit and at rest, access controls, logging, and incident response procedures. We are certified under SOC 2 Type II and ISO 27001.
4. Data subject rights
We assist the customer in responding to data subject requests to the extent technically feasible and within the scope of the service.
5. Audit
Business and Enterprise customers may request copies of our SOC 2 Type II and ISO 27001 reports under a non-disclosure agreement.