This page summarizes the Data Protection Agreement ("DPA") available to customers who need one for their own compliance obligations, for example under GDPR.
1. Roles
For account and project data you provide, WebNativeApp acts as a data processor and you act as the data controller, except where we determine the purposes of processing (such as billing), where we act as a controller.
2. Processing instructions
We process personal data only as needed to provide the service and in accordance with your instructions as reflected in your account configuration and these policies.
3. Subprocessors
We use a limited set of subprocessors to operate the platform, listed on our Subprocessors page. We will provide reasonable notice of material changes to that list where required.
4. Security measures
We maintain technical and organizational measures described in our Security page, including encryption in transit and access controls over production systems.
5. Requesting a signed DPA
If your organization requires a countersigned DPA, contact legal@webnativeapp.com and we will provide the current version for signature.
Last updated: July 2, 2026.