1. Controller and processor
A business generally controls the purposes of processing its contacts, uploaded knowledge, messages and configured agents, while Rebnal generally processes this customer content on documented instructions. Rebnal may independently determine account security and billing processing purposes.
2. Contract details
An executed DPA should identify the customer and Rebnal legal entities, services and processing instructions, processing purpose and duration, personal-data types, data subjects and agreed technical safeguards. A generic public web page cannot substitute for those binding schedules.
3. Security and confidentiality
A DPA may set commitments concerning confidential personnel, access controls, subcontractors, data-subject assistance, incident notification, audit information, impact assessments, retention, return and deletion as required by law. Any certification or audit claim requires independent evidence.
4. Subprocessors and change management
External infrastructure, AI, messaging, speech, email, security and payment processors may be engaged only when relevant to the service. The contract may provide an actual subprocessor list and a process for reviewing material changes or objections.
Listing Stripe, EPS, Soniox or a channel on a planning page does not mean every provider is currently integrated into every workspace.
5. Regional international transfers
Where EU/EEA or UK rules apply, transfers may need an adequacy decision, EU standard contractual clauses, UK addendum or other legally valid transfer tool, with case-specific assessments. Separate rules may apply to regulated or localised data.
This overview does not itself sign those documents or make a blanket claim that all prospective international transfers are compliant.
6. End of contract and contact
The executed agreement controls export, permitted retention, deletion and transition obligations, with mandatory statutory duties taking precedence. Request an enterprise DPA by writing [email protected], giving your organisation, countries and intended features.