Last updated: 2026-05-10
Our Data Processing Addendum (DPA) applies to B2B customers acting as controllers and names PureBox.ai Founder (sole proprietor, d/b/a PureBox) as processor. It incorporates SCC Module Two (Controller-to-Processor), the UK IDTA, and the Swiss transfer addendum.
The linked template is our current B2B DPA form. Email support@purebox.ai with your legal entity details to request a countersigned copy.
B2B customers handling personal data through PureBox should execute this DPA. Consumer/individual users are governed by our Privacy Policy and Terms of Service.
This is a general commercial Data Processing Addendum. It is not a HIPAA Business Associate Agreement (BAA) and does not authorize the processing of protected health information (PHI). PureBox does not support use cases involving regulated healthcare data.
Our current subprocessors are listed at /subprocessors. The DPA cross-references /subprocessors as the single source of truth for current subprocessors and notice workflow.