Data Processing Agreement
Last updated June 2026
Template document. Counsel reviews and finalizes this text before any public launch; the structure below is the real one.
1. Roles
For personal data routed through flows, you are the controller and GoRunner is the processor. For account data, GoRunner is an independent controller as described in the Privacy Policy.
2. Scope of processing
We process flow content solely to execute flows per your configuration, for the duration of your retention settings, and never for advertising or model training.
3. Security measures
Encryption in transit and at rest, KMS-backed secret storage, role-based access with audit logging, and an internal access policy of least privilege with logged, justified access.
4. Subprocessors
The current subprocessor list with regions is maintained and available on request; we provide notice of additions and a right to object on Enterprise agreements.
5. International transfers
Where data leaves the EEA or UK, transfers rely on adequacy decisions or Standard Contractual Clauses, supplemented by the security measures above.
6. Deletion and return
On termination, flow content is deleted within 30 days, or exported on request before deletion. Zero-retention configurations leave nothing to delete.