For teams
with compliance work.
Our standard DPA covers GDPR, UK GDPR, and the EU Standard Contractual Clauses. Available on every paid plan — request a counter-signed copy by email.
LAST UPDATED · MAY 2026 · v1.0
Processing personal data of EU/UK people?
If yes, you need a DPA with every processor — that's us.
If your team uploads research material that includes personal data of EU, UK, or EEA individuals, GDPR requires a written Data Processing Addendum (DPA) between you (the controller) and us (the processor). We make ours easy to get and easy to read.
Standard processor obligations
No surprises, no creative drafting.
- We act as a processor for your Content; you remain the controller.
- We process Content only on your documented instructions (i.e. to provide the Service).
- We maintain appropriate technical and organisational security measures — see our Security page.
- We engage subprocessors (listed below) under written contracts that impose equivalent obligations.
- We assist with data-subject requests, breach notifications, and DPIA support as required by Art. 28 GDPR.
- We use the EU Standard Contractual Clauses (Module 2) and UK Addendum for transfers outside the EU/UK.
- We delete or return your Content on termination, subject to legal retention requirements.
The short list
Every third party that may process your Content on our behalf.
We maintain a current list of subprocessors. The major ones today:
- Amazon Web Services (EU, US) — application hosting and storage
- OpenAI / Anthropic (US) — LLM inference, with zero-retention API agreements in place
- Lemon Squeezy (US) — Merchant of Record, billing and payment processing
- Vercel (US) — marketing site and analytics
A complete, versioned subprocessor list is included with the DPA. We notify customers by email at least 30 days before adding a new subprocessor, giving you a chance to object.
One email
We send the DPA, you sign, we counter-sign.
Email legal@literica.ai from your account address with:
- Your full legal entity name and registered address
- The name and email of your signatory
We'll send a DocuSign envelope within one business day. Counter-signed copies returned within two.
For Lab tier customers we can also negotiate redlines and add custom annexes (data residency, sub-processor restrictions, industry-specific clauses) at no charge.
Need the DPA today?
Email legal and you'll have a signature-ready PDF within one business day.