How to execute a DPA
Contact office@zavyra.com with the legal entity name, address, authorized signatory and intended processing scope. Do not send credentials or production datasets.
Data processing agreement
Documented safeguards for customer-controlled data.
Review the public DPA summary for business customers using Zavyra to process buyer, employee or contractor data under documented instructions.
Confirm the processing scopeIdentify the data categories, users, connected providers and business purpose.
Execute the agreementRequest the contract using the legal entity and authorised signatory details.
Operate under instructionsKeep workspace configuration and provider access aligned with the documented purpose.
Data processing agreement
A clear controller–processor framework for business customers.
Where a customer uses Zavyra to process buyer, employee or contractor data, the customer normally acts as controller and ProWEB Agency acts as processor under documented instructions.
Core DPA topics
| Topic | Zavyra commitment | Customer responsibility |
|---|---|---|
| Instructions and purpose | Process customer data only to provide and secure the contracted service. | Use Zavyra lawfully and configure only necessary workflows. |
| Confidentiality and access | Apply role-based access, confidentiality and technical safeguards appropriate to risk. | Authorize only appropriate workspace users and protect credentials. |
| Subprocessors | Maintain a transparent subprocessor list and contractual protections. | Review the list and contact Zavyra about material concerns. |
| Rights and incidents | Provide reasonable assistance with rights requests and qualifying security incidents. | Supply verified request context and meet controller obligations. |
| Return and deletion | Return or delete customer data according to the agreement, law and technical backup cycles. | Export needed records and submit a verified deletion instruction. |
International transfers
Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another GDPR-permitted mechanism.
Scope
The signed agreement and applicable order form control where they differ from this public summary.
Data processing agreement
Built for clear, connected operations.
Explore the workflows described below. Available actions depend on the connected service, account permissions and selected plan.
Controller and processor roles
Define responsibilities for account data and customer-controlled commerce data.
- Documented instructions
- Purpose limitation
- Customer responsibility
Security and confidentiality
Apply safeguards appropriate to the processing risk.
- Access control
- Encrypted transport
- Confidentiality
Subprocessor governance
Use necessary service providers under contractual and transparency controls.
- Provider categories
- Transfer context
- Change process
Return and deletion
Handle customer instructions according to the agreement, law and technical retention cycles.
- Verified scope
- Export path
- Deletion request
How teams use it
From source data to a clear next move.
- 01Confirm the processing scope
Identify the data categories, users, connected providers and business purpose.
- 02Execute the agreement
Request the contract using the legal entity and authorised signatory details.
- 03Operate under instructions
Keep workspace configuration and provider access aligned with the documented purpose.
Frequently asked questions
Clear answers before you connect.
Who is the controller?
For customer-imported buyer, employee or contractor data, the business customer normally remains controller and ProWEB Agency acts as processor.
How can I request the DPA?
Contact office@zavyra.com with the legal entity name, address, authorised signatory and intended processing scope. Do not send credentials or datasets.
Does this web page replace the signed agreement?
No. This is a public summary; the signed DPA and applicable order form control.
Your next step
Explore the options for your workspace.
Review availability, choose the capabilities you need and keep provider access under your control.