SaasDash.ai

Data Processing Agreement

Last updated: June 9, 2026

1. When you need a DPA

If you use SaasDash.ai to process personal data about other individuals — for example, your team members' emails when you invite them to a workspace, or end-user data you upload as part of your SaaS metrics — you are the controller of that personal data and SaasDash acts as your processor under GDPR Article 28 and the equivalent provisions of the LGPD. In that case GDPR requires a written contract between us governing the processing.

The SaasDash Data Processing Agreement (DPA) is that contract. It is available on request and is signed by an authorized officer of Pmc Negocios Digitais Ltda.

2. What the DPA covers

  • Subject matter, duration, nature, and purpose of the processing;
  • Categories of personal data and categories of data subjects;
  • SaasDash's obligations as processor (instructions, confidentiality, security, sub-processor management, assistance with data-subject requests, breach notification, audit);
  • The EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) — module 2 (controller-to-processor) — for transfers of personal data outside the EEA;
  • The UK International Data Transfer Addendum (IDTA) issued by the ICO, for transfers from the United Kingdom;
  • The Swiss-US framework references for transfers from Switzerland;
  • A reference to our published list of sub-processors at /sub-processors and a 30-day prior-notice commitment for material sub-processor changes.

3. How to request a signed DPA

Email legal@saasdash.ai with:

  • Subject line: "DPA request — <your company name>";
  • Legal entity name, registered address, and the country of the data exporter;
  • The SaasDash account email or workspace the DPA should be associated with;
  • The name, role, and email of the person authorized to sign on your behalf.

We will send you a countersigned PDF within 10 business days. If your procurement process requires us to sign your own DPA template instead, attach it to the same email and we will review.

4. Standard Contractual Clauses & UK Addendum

The SaasDash DPA incorporates the SCCs and the UK IDTA by reference and lists the relevant module and parties in its annexes. The data importer is Pmc Negocios Digitais Ltda. For a copy of the SCC text and UK IDTA without signing the full DPA, email legal@saasdash.ai.

5. Sub-processors

The current sub-processors used by SaasDash, including their purpose, hosting region, and transfer mechanism for EU/UK data, are published at /sub-processors. We provide at least 30 days' notice on that page before adding or materially changing a sub-processor that handles personal data.

6. Contact

For DPA-related questions, contact legal@saasdash.ai. For privacy-related questions, contact privacy@saasdash.ai.