Data Processing Agreement
For customers with GDPR or CCPA obligations who need a signed agreement on file.
A Data Processing Agreement (DPA) governs how overads, as a data processor, handles personal data that you, as data controller, entrust to us when you use our service. The DPA incorporates the relevant Standard Contractual Clauses for international transfers and lists the subprocessors we rely on to deliver the service.
The DPA does not replace our Terms of Service or Privacy Policy; it sits alongside them. Most customers do not need to actively countersign it — our DPA is incorporated by reference into the Terms of Service for every paid workspace. If your legal team requires a wet or e-signed counterpart, request one below.
Request a signed DPA
Email dpa@overads.io with your legal entity name, workspace name, and the signatory email. We return a countersigned copy within five business days.
dpa@overads.ioSubprocessors
A subprocessor is a third party we use to deliver part of the service. This list is canonical; we update it before adding, removing, or materially changing any entry.
| Name | Purpose | Region |
|---|---|---|
| Amazon Web Services | Compute, storage, database, key management | United States, European Union |
| Stripe | Subscription billing and payment processing | United States |
| Anthropic | AI inference for the daily suggestions loop | United States |
| Vercel | Frontend hosting and edge runtime | Global edge, US control plane |
| Sentry | Application error monitoring | United States |