Data Processing Addendum
Last updated: July 18, 2026
1. Overview
This Data Processing Addendum ("DPA") forms part of the agreement between Qik Sign and its customers for the processing of personal data in connection with the electronic signature Service.
This DPA is intended to meet the requirements of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR.
2. Scope and Roles
Controller: The customer determines the purposes and means of processing personal data.
Processor: Qik Sign processes personal data on behalf of the customer in accordance with the customer's instructions.
This DPA applies to all personal data processed by Qik Sign in connection with the Service.
3. Processing Details
- Subject matter: Electronic signature and document management services.
- Duration: For the term of the customer's agreement with Qik Sign plus retention periods as specified in the agreement.
- Nature and purpose: Providing, maintaining, and supporting the electronic signature platform.
- Categories of data subjects: Customer's employees, contractors, and signers.
- Types of personal data: Name, email address, and signature data as provided by the customer and signers.
4. Processor Obligations
Qik Sign will:
- Process personal data only on documented instructions from the customer.
- Ensure personnel authorized to process personal data are bound by confidentiality obligations.
- Implement appropriate technical and organizational security measures.
- Not engage sub-processors without prior notice and the customer's opportunity to object.
- Assist the customer in fulfilling its obligations regarding data subject rights.
- Notify the customer of any personal data breach without undue delay.
- Delete or return all personal data at the end of the service term as instructed by the customer.
5. Sub-processors
A current list of sub-processors is maintained on our Subprocessors page. Customers will be notified of changes to the sub-processor list.
6. International Transfers
Qik Sign will ensure that any transfer of personal data to a third country is subject to appropriate safeguards as required by applicable data protection law, including Standard Contractual Clauses where required.
7. Contact
For questions about this DPA, please contact us at dpa@qiksign.com.