Last updated: 2026-04-27

Data Processing Addendum (DPA)

This is a stub. Full DPA available for Team / Enterprise customers; sign via DocuSign on contract.

Roles

Customer is data controller. VibeCoderKit Inc. is data processor.

Sub-processors

Listed in Privacy. 30-day notice on changes.

SCCs

EU SCCs (2021) module 2 incorporated by reference for cross-border transfers.

Security measures

See Security page for full controls list (S1-S20).

Audit rights

Annual SOC 2 type II planned (Phase 4). Until then, controller may request third-party pen-test summary.