Data Processing Addendum
Last updated July 2026
This Data Processing Addendum (DPA) forms part of the agreement between you (Controller) and LockMCP (Processor) and reflects the parties' obligations for processing personal data.
1. Roles & scope
You act as the Controller and LockMCP as the Processor for personal data processed to provide the service.
2. Processing instructions
LockMCP processes personal data only on your documented instructions, including as configured through the service.
3. Security measures
LockMCP maintains technical and organizational measures including encryption at rest and in transit, access controls, tenant isolation, and audit logging.
4. Sub-processors
LockMCP engages vetted sub-processors under written terms and maintains a current list available on request.
5. International transfers
Where personal data is transferred across regions, appropriate safeguards such as Standard Contractual Clauses are applied.
6. Assistance & deletion
LockMCP assists with data-subject requests and, on termination, deletes or returns personal data as instructed.