Trust & Legal
Data Processing Agreement
ALYNTE is preparing contractual data-processing terms for organizations that use ALYNTE to process personal data on their behalf.
The DPA will describe the responsibilities of ALYNTE and its customers when ALYNTE acts as a processor or otherwise processes personal data on behalf of a customer, where applicable.
DPA · Coming soon
Why a DPA matters
Organizations may provide ALYNTE with engineering and operational information that can include personal information associated with employees, contractors, customers, or other individuals. A Data Processing Agreement establishes contractual rules for processing personal data on behalf of a customer where such an arrangement applies.
Customer — determines permitted processing purposes where applicable
ALYNTE — processes information according to the applicable agreement
Individuals — may have rights under applicable privacy law
When the DPA applies
A DPA may apply when:
- A customer engages ALYNTE to process personal data on the customer's behalf
- Applicable privacy law requires contractual processing terms
- The parties agree that a DPA governs the relevant processing
Not every processing activity necessarily creates the same legal relationship. Whether ALYNTE acts as a processor, service provider, controller, or another legally recognized role depends on the nature of the processing and applicable law.
Privacy Policy and DPA serve different purposes
The Privacy Policy describes how ALYNTE handles personal information in its own operations and other applicable processing contexts.
The DPA establishes contractual obligations between ALYNTE and a customer for applicable processing of personal data on the customer's behalf.
See Privacy at ALYNTE.
DPA and Terms of Service
The DPA is intended to operate alongside the applicable commercial and contractual terms governing the customer's use of ALYNTE.
See Terms of Service.
Processing on behalf of customers
The eventual DPA will address how ALYNTE processes personal data according to documented customer instructions and the applicable agreement. Conceptual areas may include:
- Purpose and duration of processing
- Subject matter of processing
- Categories of personal data and data subjects
- Customer instructions and applicable legal requirements
The final contractual schedules will be published when the DPA is finalized.
Personal data that may be processed
Depending on the customer's configuration and connected systems, personal data may include:
- Names and work email addresses
- Usernames and employee identifiers
- Issue assignments and organizational role information
- Commit authorship, pull request authorship, and reviewers
- Comments, timestamps, and engineering activity metadata
The actual information processed depends on the systems a customer connects to ALYNTE and the information made available through those systems.
Individuals whose information may appear in Customer Data
Potential categories may include:
- Employees and contractors
- Consultants and authorized users
- Collaborators and individuals referenced in connected engineering systems
Depending on the customer's use of ALYNTE, Customer Data may relate to individuals who interact with or are represented in the customer's engineering systems.
Customer instructions
Customers determine the permitted purposes and scope of processing where ALYNTE acts on their behalf. The final DPA will establish how instructions are provided, documented, changed, and handled when they conflict with applicable law.
ALYNTE's responsibilities
The eventual DPA may address areas such as:
- Processing according to applicable customer instructions
- Confidentiality and security measures
- Assistance with applicable data-subject requests and security incidents
- Subprocessors and deletion or return of data
- Compliance obligations relevant to the processing relationship
These areas will be described as contractual commitments only in the finalized DPA after legal review.
Confidentiality
The eventual DPA will address confidentiality obligations for personnel and others authorized to process Customer Data.
Security measures
The final DPA will describe the technical and organizational measures applicable to ALYNTE's processing activities and will align with ALYNTE's actual security practices.
See Security at ALYNTE.
Subprocessors
ALYNTE may use third-party service providers to support the Services where applicable. The final DPA should define how subprocessors are engaged, authorized, notified, and contractually bound.
A public subprocessor list will be provided when the applicable service and contractual framework are finalized.
International data transfers
Where personal data is transferred across jurisdictions, the final DPA will identify the applicable transfer mechanisms and contractual safeguards based on the jurisdictions and processing arrangements involved.
Assistance with data subject requests
Customers may need assistance when individuals exercise applicable privacy rights involving personal data processed on the customer's behalf. Potential rights may include access, correction, deletion, restriction, portability, or objection, depending on applicable law.
The final DPA will define the applicable assistance process and responsibilities.
Security incidents
The final DPA will establish contractual responsibilities relating to security incidents involving applicable Customer Data, including applicable notification and cooperation obligations.
See Security at ALYNTE.
Legal and government requests
ALYNTE may be required to disclose information when legally required. The final DPA should address, where applicable, notification to the customer, legal restrictions on notification, cooperation, and disclosure minimization.
Return and deletion of Customer Data
The final DPA will establish the applicable requirements for return or deletion of Customer Data following termination of the relevant Services, subject to legal obligations, agreed retention requirements, technical limitations, and applicable backup or archival processes.
Audit and compliance information
The final DPA will define the information, documentation, and audit mechanisms available to customers for demonstrating compliance with applicable processing obligations.
Data protection assessments
Where applicable, the final DPA may describe reasonable assistance with data protection impact assessments, regulatory consultations, or information needed to assess processing risks. The scope of assistance will be defined in the finalized agreement.
Contractual terms
The finalized DPA will establish the contractual framework applicable to data processing, which may include responsibilities, liability, indemnification, precedence, termination, governing law, and dispute provisions as approved by qualified legal counsel.
General use of ALYNTE is described in the Terms of Service.
Current DPA status
The ALYNTE DPA is currently being finalized as part of the Trust & Legal framework for the December 2026 product launch.
The final agreement will reflect ALYNTE's actual processing practices, security measures, subprocessors, transfer arrangements, retention practices, and contractual commitments at the time it becomes available.
Questions about data processing
Organizations evaluating ALYNTE can contact us about data-processing requirements, contractual expectations, privacy questions, and security considerations.