Legal

Data Processing Addendum (DPA)

Contractual processing terms for business and enterprise customers.

Last Updated

March 15, 2026

1. Availability

Morthn provides a Data Processing Addendum (DPA) for business customers that require contractual data processing terms.

The DPA is designed to supplement Morthn Terms and applicable service agreements.

2. Processing Roles

For customer workspace data, customers typically act as data controllers and Morthn acts as a data processor, except where Morthn determines processing purposes for its own operational data.

3. Core DPA Commitments

Processing only on documented customer instructions, subject to legal requirements.
Confidentiality obligations for personnel with access to personal data.
Appropriate technical and organizational security measures.
Subprocessor controls and contractual flow-down obligations.
Assistance with data subject requests where required by law and contract.
Breach notification obligations aligned with contract and law.
Deletion or return of personal data at termination, subject to legal retention obligations.
Audit rights and information rights as defined in the executed DPA.

4. International Transfers

Where personal data transfers require transfer mechanisms, the DPA can include appropriate safeguards such as standard contractual clauses where applicable.

5. How to Request a DPA

Email support@morthn.com with your legal entity name, billing email, and primary jurisdiction, and include "DPA Request" in the subject line.

For enterprise deals, DPA requests can also be handled through your sales process and order form packet.

DPA requests

Request an executable DPA by contacting support@morthn.com with your legal entity and primary jurisdiction.