Legal
Data processing agreement
Status — drafted, pending legal review · last updated
This is a draft published for review. It is not a binding agreement, and the operator's counsel has not approved it.
This document is not yet in force because Bookesto has no customers and no deployed service. What is stated below is our intended position, published early so that it can be read before there is anything to agree to. It will be replaced by a reviewed and dated document before the first account is created.
There is nothing to sign yet
There is no signable data processing agreement yet. It is drafted and with counsel, and it will be published here with a version and a date when it is ready. Standard contractual clauses, the subprocessor list and the notification process for subprocessor changes will all be part of it.
If your procurement process needs a signed DPA before evaluation, Bookesto is not ready for you yet. That is a real answer rather than a delay tactic.
The list of third parties that would be named in it is published today at /legal/subprocessors, and what is and is not true about our security posture is at /security.
Questions: legal@bookesto.com. Changes to any of these documents are published on the changelog before they take effect.