Data processing addendum (DPA)

When TesterAgent tests your website or app, the pages and screenshots can contain personal data of your users. For that data you are the controller and TesterAgent is your processor. Business customers who need a signed agreement can download our DPA template below.

Summary

Roles: you (the customer) are the controller of personal data in the sites and apps you test; we are the processor. For your own account and billing data we are an independent controller (Privacy policy).
What we do with it: open your pages and app screens, take screenshots, run rule-based checks and build reports — only on your instructions (the settings you choose).
How long: screenshots 90 days, reports until you delete them or your account — see the Data retention policy.
Security: the measures on our Security page; breaches notified without undue delay (target 72 hours).
Sub-processors: the Sub-processors list; new ones announced at least 14 days in advance, with a right to object.
Your part: have permission for every site and app, prefer staging environments and test accounts, and avoid sensitive data on tested pages.

Download the template

Download the DPA template (Markdown) — fill in your details, sign and send it to [[OWNER: privacy email (PRIVACY_EMAIL)]] / the Contact page. It is a template that has not yet been reviewed by a lawyer.