Data processing agreement.

For EU and EU-customer-facing engagements we sign a standard DPA built on the European Commission's Standard Contractual Clauses.

Roles

For data your customers entrust to you, you are the controller and Sepnexus is the processor. For data you create with us (account credentials, billing), Sepnexus is the controller.

Sub-processors

• Razorpay — payments processing.
• Resend — transactional email.
• Hetzner / Hostinger / AWS / GCP — infrastructure hosting (per engagement).
• Cloudflare — CDN and DDoS protection (where enabled).

We give you 30 days' notice before adding a new sub-processor that handles customer data.

Request the DPA

Email akshay@sepnexus.comand we'll send the latest signed version within one business day.

Last updated: 2026-05-10.