DPA
Data Processing Agreement
How HorizonShield processes data on your behalf.
Roles
You are the data controller. HorizonShield is the data processor for everything you put into HS Shield.
Subprocessors
List of subprocessors and their data flows is published and updated on this page; 30-day notice on additions.
Security measures
Encryption in transit (TLS); backups encrypted at rest under HS Vault split duty; field-level encryption of stored personal data rolling out. AppRole-gated secrets. Regular internal security assessments; independent third-party assessment planned.
Breach notification
We notify you within 72 hours of confirmed unauthorized access affecting your data.
Termination + return
On termination we return your data in a portable format and delete from production within 30 days.