Data Processing Agreement

When Sherlock processes personal data on your behalf as a controller (e.g. founder interview data collected for your fund), we act as processor under Art. 28 GDPR. We process data only on your documented instructions, ensure confidentiality of authorised personnel, take appropriate technical and organisational measures (TOMs), and assist you with data-subject requests and security incidents.

Sub-processors

A current list of sub-processors is available on request. We notify customers of changes in advance.

Signing the DPA

Customers can request a counter-signed DPA at [TODO: dpa@sherlock.example].