Data Processing
Addendum (DPA).
For customers subject to GDPR, UK GDPR, CCPA/CPRA, or similar data-protection regimes, RedMapAlert offers a Data Processing Addendum that supplements our standard Terms of Service and governs how we process customer personal data on your behalf.
What the DPA covers
- • Roles: RedMapAlert acts as the Processor; the customer is the Controller of any personal data submitted to the platform.
- • Scope of processing: account email, organization, watchlists, report metadata, and audit logs — limited to what’s necessary to deliver the service.
- • Subprocessors: a current list (Vercel, Clerk, Stripe, managed Postgres/Redis providers, OpenAI for report generation) is published on the Security page and updated when changes occur.
- • Security measures: encryption in transit and at rest, access controls, incident response — see /security.
- • International transfers: Standard Contractual Clauses (EU 2021/914) and the UK International Data Transfer Addendum where applicable.
- • Data subject rights: assistance fulfilling access, rectification, deletion, and portability requests within statutory deadlines.
- • Breach notification: notice within 72 hours of confirmed breach affecting customer personal data.
- • Audit rights: annual SOC-style report (once SOC 2 is complete) or written security questionnaire response.
- • Term & deletion: personal data is deleted within 30 days of contract termination, subject to legal retention requirements.
A note on the data we serve
The enforcement intelligence delivered by the platform — DOJ press releases, SEC filings, IRS Form 990 disclosures, FTC and CFPB actions — originates from public U.S. federal records. RedMapAlert does not act as Controller of that public data.
The DPA governs the personal data of your team members (the people who use your account) — not the public-records subjects of the reports we generate.
Request the DPA
The DPA is available to all paid customers on request. Email us with your company name and the email address of the legal/procurement contact who will counter-sign, and we’ll send the executable PDF within two business days.
Email legal@redmapalert.com →Operated by ECONSTART LLC, a Florida limited liability company. For other legal inquiries, see our Privacy Policy and Terms of Service.