Data Processing Addendum
Data Processing Addendum (DPA) for Envoy customers.
Data Processing Addendum
Last updated: 2026-07-28
This DPA supplements the Terms of Service when ClonePartner processes personal data on behalf of a customer using Envoy.
Roles
- Customer is the controller (or processor instructing us) for personal data loaded into their Envoy instance.
- ClonePartner is the processor for that instance data and for account/billing personal data as described in the Privacy Policy.
Instructions
We process instance data only to provide the Service, on customer instructions (including configuration in the product), and as required by law.
Security
Each customer receives a dedicated instance with a separate encryption key. Infrastructure credentials are not held by the public portal. Details that are true today are listed on the Security page.
Subprocessors
Infrastructure and billing providers (cloud hosts, Stripe, email delivery when configured). A current list is available on request.
International transfers
Where data is transferred internationally we use appropriate safeguards. EU hosting options are available on request.
Deletion and return
On account deletion we destroy the fleet tenant. Customers may export data from their instance before deletion. Billing records may be retained as required by law.