Our Data Processing Agreement (DPA) sets out the terms under which Vook processes personal data on behalf of its business customers, in accordance with Article 28 of the General Data Protection Regulation (GDPR). It covers our obligations as a data processor: security, confidentiality, sub-processor management, data-subject-request assistance, breach notification, deletion, and international transfers.

The DPA is self-executing. It applies to every business customer using the Service and is deemed accepted upon acceptance of our Terms of Service. No signature is required. Individual users who sign up for their own account with a personal or professional email are covered by our Terms of Service and Privacy Policy; the DPA is not required for that use.

Each version of the DPA follows the naming convention vook-dpa-en-vYYYY-MM.pdf, where YYYY-MM is the year and month of publication (for example, vook-dpa-en-v2026-09.pdf). For any question about the DPA or to request a specific prior version, contact us at contact@vook.ai.