Legal & policies
Data Processing Agreement
Last updated: 17 June 2026
This Data Processing Agreement (DPA) sets out the terms under which Yappa processes personal data on behalf of your organisation, in accordance with Article 28 of the UK GDPR.
Draft. The full wording of this document is being finalised and is pending professional legal review before production launch.
Roles
Your organisation is the data controller; Yappa acts as the data processor for the personal data you upload and process through the platform.
Sub-processors
Yappa uses a set of infrastructure and service sub-processors to deliver the platform. A current list is available on request from privacy@getyappa.com.
Related policies
Terms of Service
The agreement that governs your use of the Yappa platform.
Privacy Policy
What personal data we collect, why, and your rights under UK GDPR.
Cookie Policy
The cookies we use and how consent controls analytics.
Security
How we protect your data — tenant isolation, encryption and more.
Application Terms
Terms specific to the Yappa apps and connected channels.