Data processing agreement

For procurement. Unusually short, because of where the processing happens.

Last updated 2026-09-24.

The short version

A data processing agreement governs what a processor does with a controller's data. For in-browser conversion there is no processing to govern: your files are read by code running on your own machine and are never transmitted to us. We are not a processor of the file contents because we never receive them.

What we do process

Account data only: an email address, a plan, and a ledger of credits. That is the scope of any agreement, and it is deliberately small.

Sub-processors

Hosting for the static site and, once billing is live, a payment processor. Both handle account data, neither handles file contents. The current list is available on request and we will notify account holders before adding to it.

Signing one

If your procurement process needs a countersigned DPA, email legal@veconvert.com with your template. Ours would say less than yours does, so it is usually quicker to review yours against the two paragraphs above.

Your own review

This describes the architecture accurately. Your counsel may want to review it against your own requirements; we are glad to answer their questions at legal@veconvert.com.