Totatus Identity — Data Processing Agreement

1. Roles

When you submit end-user data for verification, you act as data controller and Toutatis Limited acts as processor under this DPA.

2. Sub-processors

We use EU-hosted infrastructure providers. An up-to-date sub-processor list is published on the Sub-processors page.

3. Security

We implement encryption in transit and at rest, access controls, audit logging and per-tenant encryption keys where configured.

4. Request a signed DPA

Contact info@toutatis.eu for a countersigned DPA for your organisation.

Questions about these documents? We are happy to clarify.