Data Processing Agreement

CheckPt is a product of Lockdown Media Inc., and Lockdown Media Inc. is the company you contract with. When you use CheckPt for your organization, you decide what personal data goes into it and we process that data on your behalf. Under the GDPR that makes you the controller and us the processor, and Article 28 requires a written agreement between us. Our Data Processing Agreement is that agreement.

Any organization using CheckPt to process personal data — in practice, our Team and Enterprise customers, and anyone on a paid plan whose own compliance programme requires one. Individuals using CheckPt for themselves are covered by the privacy policy and do not need a separate DPA.

The agreement sets out:

• That you are the controller and CheckPt is the processor
• The subject matter, duration, nature, and purpose of the processing, and the categories of data and data subjects
• Our use of subprocessors, and your right to be notified of changes and to object
• The technical and organizational security measures we maintain
• Our assistance with data subject requests, breach notification, and impact assessments
• Deletion or return of personal data when the agreement ends
• Your rights to the information needed to demonstrate compliance

The subprocessors covered by the agreement are the ones published on our subprocessor list. View the subprocessor list

Our primary infrastructure runs in the United States, so the agreement incorporates the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum, as the transfer mechanism for personal data leaving the EEA or the UK.

Email us with your organization's legal name and registered address, and we will send the agreement for signature. We aim to respond within five business days.

legal@checkpt.io