Data Processing Agreement (DPA)

Latest update: June 18, 2026

This Data Processing Agreement automatically takes effect on the date the framework agreement is signed and remains in effect until the framework agreement is terminated. A separate signature is not required: under Art. 28 GDPR, text form is sufficient, and the DPA is already legally agreed upon together with the framework agreement.

The List of Subprocessors and the Technical and Organizational Measures (TOMs) are provided as annexes to the DPA. Both may be updated by heylogin over time in accordance with the terms defined in the DPA:

Do you still need a version signed by both parties? If your internal policies require a separately signed version, we are happy to sign the DPA in a legally valid way digitally via our partner Yousign: Submit request via Yousign

Please visit our Trust Center if you have any further questions: