Data processing agreement

Where Vercatus processes personal data for you, it does so as your processor under a data processing agreement. The published agreement applies to every workspace as part of the terms of service, so no customer has to ask for it.

Signing a copy in the workspace

A signed copy is part of every paid plan: self-serve on Starter, Growth and Portfolio, and countersigned by Vercatus on Enterprise. It lives under Settings, Security, Data processing agreement.

Before signing opens in your workspace the page says Signing is not open yet; the published agreement applies, and Enterprise customers receive a countersigned copy on request.

Once signing is open:

1. An owner of the workspace, signed in as a person, opens the page (admins can read it; API keys cannot sign).
2. They enter the entity’s legal name, registered address and country, a registration or VAT number if there is one, their full name and title, and the email for the signed copy.
3. They type their full name as the signature, confirm they are authorised to sign for the entity, and press Sign agreement.

Signing records the time and the signer’s network address with the text’s fingerprint. The signed PDF, with a signature page carrying those details, is emailed to the address given and stays downloadable from the same page.

On Enterprise, Vercatus then countersigns; the countersigned PDF is emailed and appears on the page. On the other plans, the agreement binds Vercatus on your signature.

New versions

When a new version is approved, the page says so and offers it for signing. The agreement you signed stays in force until you sign the new one; the page keeps every agreement signed there, with its state: signed, countersigned or superseded.

Signing and countersigning are recorded in the audit log. How Vercatus handles data, including what it retains and for how long, is on Security and data handling.