Our data processing agreement
Vyera's DPA is published at vyera.ai/dpa and is incorporated into the Terms automatically, so there is nothing to sign.
Vyera already has a DPA, published at vyera.ai/dpa and incorporated into our Terms. Accepting the Terms accepts the DPA — nothing separate to request, negotiate or sign.
What it covers
| Area | Where |
|---|---|
| Controller/processor roles | Section 2 |
| Processing on your instructions only | Section 3 |
| Security measures | Annex 2 |
| Subprocessors and change notice | Section 6 and Annex 3 |
| Data subject request assistance | Section 7 |
| Breach notification (72 hours) | Section 8 |
| International transfers | Section 10 |
| Audit rights | Section 11 |
| Deletion/return on termination | Section 12 |
| Processing details (categories, purposes, types) | Annex 1 |
The published DPA is authoritative; where this article differs, the DPA governs.
If your legal team needs more
We first seek to satisfy audit requests through documentation and security summaries (section 11); if not enough, the DPA allows one audit per 12 months on 30 days' notice. Contact info@vyera.ai beyond that.
What it does not do
The DPA excludes data where Vyera is controller in its own right — account, billing and usage data — covered by our Privacy Policy instead. For your rights over that data, see UK GDPR and your rights.
Nor does it override the Terms generally; it takes precedence only for personal-data processing (section 13.2).
Was this useful?
Related articles
- Our subprocessors
Vyera uses eight subprocessors, listed below, and gives 30 days' notice before adding or replacing one.
- Data retention periods
Most data is kept while your account is active and deleted within 30 days after, with backups purged within 90 days. Billing records are kept for six years.
- How we secure your data
Your data is encrypted in transit and at rest, and access is restricted on a least-privilege basis. Vyera holds no independent security certification.
- Where your data is stored
Vyera runs in Amazon Web Services' London region. Some processing, including AI generation, takes place outside the UK.
Still stuck?
Send this to the team and we will pick it up.