A Data Processing Addendum (DPA) is a legally binding document that serves as an agreement between two parties, typically the data controller (customers) and the data processor (Esri). It outlines the roles, responsibilities, and obligations of both parties when processing and handling personal data. At its core, the DPA clarifies that the customer is in control of their data, deciding how it's used and for what purpose. Esri processes this data based on the customer instructions. Though our DPA satisfies General Data Protection Regulation (GDPR) commitments, the privacy assurance within the DPA is applicable to all customers.
Resources
- Esri Data Processing Addendum (DPA) (Public Trust Center document)
- Overview of Esri Product Privacy (Public Trust Center page)
- Esri GDPR Commitment (Public Trust Center page)
- Sub-processor - Amazon Web Services (DPA) (Public)
- Sub-processor - Microsoft Azure (DPA) (Public)