Data Processing Addendum
Last updated24 July 2026
This page explains how to obtain a Data Processing Addendum ("DPA") for your use of Artifically and what it covers. The DPA itself is a contract signed between you and Artifically; it is not reproduced on this page.
1Our roles
For the personal data your automations process on your behalf — the messages, tickets, documents, records, and call content that pass through them — you are the controller and Artifically is the processor. You decide what is processed and why; we process it on your instructions, which you give by configuring and running an automation.
For the data we need to run our own business — your account details, billing records, and the operational logs we keep to secure and support the platform — Artifically is the controller. That processing is described in our Privacy Policy.
2When you need one
If you are subject to the GDPR, the UK GDPR, or a comparable regime, and you use Artifically to process personal data about people in those jurisdictions, a written processing agreement between you and us is expected of you. A DPA is that agreement.
If no such regime applies to you, you may still request one.
3How to request one
Email legal@artifically.com from the address on your account, stating the legal name of the contracting entity. We will send our current DPA form for signature.
We do not publish a standard form on this page and we do not offer a pre-signed click-through. The DPA is executed between named parties, and formal entity registration for Artifically is still in progress — that status is stated on the form itself, so you know exactly who you are contracting with.
4What it covers
Our current form addresses the following.
- The subject matter, duration, nature, and purpose of the processing, and the categories of personal data and data subjects involved.
- Our obligation to process only on your documented instructions.
- Confidentiality obligations on anyone permitted to access the data.
- The security measures we operate — the same measures published on our Security page and in our Privacy Policy, stated as fact and with no certification claims.
- The terms on which we engage subprocessors, and notice to you when they change.
- Assistance with data-subject requests, breach notification, and any impact assessment you are required to carry out.
- What happens to the data when your account ends — deletion or return, subject to the retention periods in our Privacy Policy.
- The mechanism relied on for international transfers, such as standard contractual clauses.
5Subprocessors
The current list of subprocessors is published in our Privacy Policy and is incorporated into the DPA by reference. Where the DPA requires notice of a change, we send it to the account contact by email.
6Contact
DPA requests and questions: legal@artifically.com.