Legal
Data Processing Agreement
If you process personal data of your own users through Rustbox and need a Data Processing Agreement under the GDPR or UK GDPR, Orkait makes a DPA available on request.
Request a DPA
Email [email protected] from your account address with your legal entity name and we will provide our current DPA for signature.
Roles
For personal data you submit through Rustbox to process on behalf of your own users, you are the data controller and Orkait acts as your data processor. For account and operational data, Orkait is the controller, as described in the Privacy Policy.
Sub-processors
Orkait engages the sub-processors listed on the sub-processor page to deliver the service. The DPA covers their engagement and the obligation to impose equivalent data protection terms on them.
International transfers
Where personal data is transferred outside the European Economic Area or the United Kingdom, the DPA relies on European Commission Standard Contractual Clauses, the UK Addendum, or another recognized transfer mechanism.
Security and assistance
The DPA describes the technical and organizational measures used to protect data, breach notification, assistance with data subject requests, and deletion or return of data on termination.
Last updated: May 24, 2026