Data Processing Addendum
For customers who process personal data of their own users through PromptX. Last updated June 22, 2026.
Roles
When you use PromptX to process personal data of your own users, you act as the data controller and PromptX acts as your data processor. We process that data only on your documented instructions to provide the service.
Our commitments
We implement appropriate technical and organizational measures to protect personal data, ensure persons processing it are bound by confidentiality, assist you with data-subject requests, and notify you without undue delay if we become aware of a personal-data breach affecting your data.
Sub-processors
We use vetted sub-processors covering authentication, database and application hosting, transactional email, EU-hosted product analytics, and AI processing for certain features. Each is bound by data-protection terms consistent with this addendum.
International transfers
Where personal data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses.
Requesting a signed DPA
A countersigned Data Processing Addendum is available on request. Email contact@promptx.xevos.dev and we will arrange it.