Legal
Data Processing Addendum
Last updated July 29, 2026
Organizations subject to EU/UK GDPR or comparable privacy regimes may require a Data Processing Addendum (DPA) covering Candor's processing of personal data on their behalf.
Requesting a DPA
Email privacy@candor.app with your legal entity name and registered address. We will provide our standard DPA, which incorporates the EU Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable, along with the list of current subprocessors.
Subprocessors
Candor's current subprocessors are listed in our Privacy Policy. We provide reasonable notice before adding new subprocessors.