Fohrkast self-compliance

Data Processing Addendum

Fohrkast's customer-facing processor commitments for Shield, Site, Radar, and hosted compliance records.

Scope

This page provides general information about Fohrkast's own operations. It is not legal advice.

This DPA summary applies when Fohrkast processes personal data for a customer as a processor under GDPR Article 28.

The customer is the controller for its end-user consent records, hosted policy content, and website-compliance settings.

Fohrkast processes customer personal data only to provide and secure the service, follow documented customer instructions, and meet legal duties.

Fohrkast applies access controls, encryption in transit, EU-region hosting choices, audit logs, rate limits, and least-privilege operational access.

Fohrkast assists customers with DSARs, security incidents, deletion, export, and compliance information where required by GDPR.

Fohrkast uses the listed sub-processors for hosting, database, AI document drafting, billing, and operational delivery.

Fohrkast keeps sub-processor contracts, DPAs, and SCC or equivalent transfer terms where needed.