Enterprise
Data Processing Agreement
This page summarises the intended basis on which PerfectPaper processes personal data for organisations. It is not itself an executed Data Processing Agreement; a contract reviewed for the customer and applicable jurisdictions is available through our enterprise process.
Legal terms, production providers, processing locations, retention periods, and transfer safeguards must be confirmed in the signed agreement.
Roles
Your organisation (the "Controller") determines the purposes and means of processing personal data. PerfectPaper (the "Processor") processes personal data only on your behalf and under your documented instructions.
What we process
On behalf of your organisation we process the content of uploaded manuscripts and the personal data of your organisation's members (name, email address, and account activity) solely to provide the PerfectPaper review service.
Subprocessors
A current list of subprocessors is available on our subprocessors page . Notice periods, objection rights, and any consent requirements are governed by the signed agreement and applicable law.
Security
Our security design includes scoped access controls, authentication safeguards, secure development, monitoring, and encryption at the application and infrastructure layers. The signed agreement and security schedule define the applicable commitments. See our security page for details.
International transfers
Where a restricted international transfer occurs, the signed agreement must identify an applicable transfer mechanism and any required supplementary measures. No particular mechanism is represented as active until confirmed for the production processing path.
Retention and deletion
We retain personal data while needed to provide and secure the service and meet contractual or legal obligations. Members and organisation owners may submit deletion requests. The signed agreement and approved retention schedule govern deletion from active systems, providers, records, and backups, subject to legal holds.
Data subject rights
We will assist you in fulfilling data subject rights requests (access, correction, erasure, portability) within the timeframes required by law. Requests may be submitted via our rights request form .
Request a DPA
Enterprise customers may request a signed DPA. Contact us at [email protected] with your organisation name and the email address of your authorised signatory.