Data Processing Agreement (DPA)

Version 1.0 — April 2026

This DPA governs how InvoicePeppol processes personal data on behalf of our customers, in accordance with Article 28 of the GDPR.

The agreement covers:

• The scope, nature, and purpose of data processing
• Obligations of both the Controller (you) and the Processor (InvoicePeppol)
• Technical and organisational security measures
• Sub-processor management and notification procedures
• Data subject rights, breach notification, and audit rights

If you require a signed copy of this DPA, please contact us at [email protected].

Download DPA (PDF)