Data Processing Agreement (DPA)
Last updated: 24 June 2026
When Audnexa processes personal data on behalf of a customer (e.g. in cloud or hybrid mode), Virtline sp. z o.o. acts as the processor and the customer as the controller. This relationship is governed by a Data Processing Agreement (DPA).
What the DPA covers
- subject matter, duration and nature of processing,
- categories of personal data and data subjects,
- security and confidentiality obligations,
- use of subprocessors and their current list,
- the customer’s right to audit,
- deletion or return of data after the engagement ends.
When it applies
In offline mode (Bank Mode), audit data and materials can stay within the customer’s infrastructure — so the scope of processing is minimal or none. In cloud/hybrid mode, the DPA sets out the details of data flow, location and protection.
How to obtain the DPA
The full DPA is provided as part of the contracting process and on request. Write to biuro@virtline.com.