Data Processing Agreement

A plain-English summary of the processing terms available for client engagements.

When Answers IT processes personal data on a client’s behalf, the client is the controller and BluePeak Studios LLC is the processor. A signed agreement defines the actual scope before authorised access begins.

What the agreement covers

• Subject, purpose and duration — the systems, data categories, processing activities and engagement period.
• Documented instructions — processing only within the agreed service and lawful client instructions.
• Confidentiality and access — named accounts, least privilege and confidentiality obligations.
• Security — administrative and technical safeguards appropriate to the systems and data.
• Sub-processors — approved providers, notification and objection rights where applicable.
• Incidents and assistance — prompt notice, investigation support and reasonable help with controller obligations.
• Return, deletion and audit — offboarding, retention limits and a documented review mechanism.

Request the full document

The public page is a summary, not a substitute for the signed DPA. Request the complete agreement during assessment or onboarding by emailing hello@answers.info.