Data Processing Agreement

At Verdatir, we understand that the environmental product data you entrust to our platform is highly confidential and business-critical. This page outlines how we process, store, and protect your data.

Data processing principles

  • Customer documents are stored and analysed by AI models in the EU. Our subprocessors and their regions are listed in the Privacy Policy.
  • Your data is shared only with the subprocessors listed in our Privacy Policy, under data processing agreements, and only to run the service.
  • Data is never used for AI model training or any purpose beyond your direct use of the platform.
  • All processing is governed by GDPR-compliant data processing agreements.

Requesting a DPA

Enterprise customers can request a formal Data Processing Agreement (DPA) by contacting us at legal@verdatir.com. We are committed to meeting the security and compliance requirements of your organization.

Security certifications

Verdatir is actively pursuing ISO 27001, SOC 2 Type II, and full GDPR compliance certifications. Customer documents are stored and analysed in the EU; the Privacy Policy lists the subprocessors that handle limited data outside the EU.