Trust Center

Data Processing Agreement (DPA)

Standard DPA mirroring GDPR Art. 28 + EU SCC Module 2. Sign before sending your first production request.

AVV-Generator (Auftragsverarbeitung, Art. 28 DSGVO)

Self-serve: enter your company details and generate a ready-to-sign Auftragsverarbeitungsvertrag (German), mirroring Art. 28 DSGVO + SCC Module 2.

Subprocessor register

Versioned, dated list of every third-party processor with region + EU-transfer mechanism. Subscribe for change notices. Current: v2026.2 (2026-06-21).

EU-transfers annex (SCC / DPF / TIA)

Honest, per-subprocessor transfer posture — including the onward model engines (Kling is operated in Singapore, not the US → SCC + Transfer Impact Assessment).

Technical + organizational measures (TOMs, Art. 32)

The security-measures annex referenced by the DPA + AVV: encryption, access control, resilience, breach response.