Data processing agreement
Last updated: May 2026
This DPA applies when you, our customer, act as data controller for the personal data you put into Beamly, and we act as your data processor.
Scope
Beamly processes personal data only on documented instructions from you, for the purpose of providing the platform under our terms of service.
Sub-processors
- Stripe — payments.
- Cloudflare — DNS and TLS edge.
- Mailgun — transactional email.
- Sentry — error monitoring (no customer content).
We give you 30 days' notice before adding a new sub-processor and publish the current list on this page.
Security
We follow the controls described in our security overview, including encryption in transit and at rest, role-based access, and audit logging.
Data location
Customer data is stored in our Sydney region. We do not transfer customer data outside Australia without your written agreement.
International transfers (EU)
Where Kinnex Portugal Unipessoal Lda contracts with EU customers, we rely on the European Commission's Standard Contractual Clauses for any transfer of personal data outside the EEA.
Breach notification
We notify you without undue delay — and inside 72 hours — of any personal-data breach affecting your data.
Audit
Once per year, with reasonable notice, you may audit our processing under an NDA. We'll provide answers to a security questionnaire on request.
Counter-signing
If you need a counter-signed copy on your paper, email [email protected] and we'll send one across.