Data processing agreement

What the DPA covers

• Scope, duration and nature of processing for each activated module (orders, products, assets, analytics…).
• EU hosting and data residency: Nucleo runs on infrastructure located in the European Union (Frankfurt, Germany), with a dedicated data architecture on Enterprise plans.
• Security measures, confidentiality, breach notification and audit commitments.
• The list of authorized sub-processors (infrastructure and email providers, all configured on EU regions) and the mechanism for updates.
• Standard Contractual Clauses where any transfer outside the EEA applies.

How to get it

The signed DPA and the current sub-processor list are provided with your order form — or beforehand on request at hello@madeinevolve.com.