OPERATIONSPRO
Accountability. Clarity. Results.
Data Processing Agreement
Vector Operations Pro · Draft of 2 October 2026 · Ask us for the current version.
This Data Processing Agreement ("DPA") forms part of the Terms of Service between VectorXPro LLC ("Processor") and the Customer organization ("Controller") for Vector Operations Pro. It applies to personal information VectorXPro processes on the Customer's behalf. Where the Customer needs a countersigned copy, write to support@vectorxpro.com.
1. Roles
The Customer decides what is recorded in Vector and why; it is the controller. VectorXPro processes that information only to provide Vector; it is the processor (a "service provider" under U.S. state privacy laws).
2. What is processed
| Item | Detail |
|---|---|
| People | The Customer's employees, contractors and other people it names in Vector |
| Personal information | Name, work email, job title, role, site access, the work they record or are assigned, and photographs they take. Company sign-in: name and email from the Customer's identity provider. Two-step: the Authenticator secret. |
| Not intended | Health, financial account, government ID or other sensitive personal information. The Customer agrees not to enter it. |
| Purpose | Providing, securing and supporting Vector for the Customer |
| Duration | The subscription, then deletion as in section 8 |
3. VectorXPro's commitments
- Process the Customer's personal information only on its documented instructions (these terms and how the Customer uses Vector), and tell the Customer if an instruction appears unlawful.
- Not sell or share it, not use it for advertising, and not use it to train AI models.
- Ensure anyone at VectorXPro with access is bound to confidentiality.
- Help the Customer respond to requests from individuals (access, correction, deletion) and with reasonable security or privacy assessments.
4. Security
VectorXPro maintains the measures described on the Security & Trust page, including: encryption in transit (TLS) and at rest; each organization separated by row-level security in the database; private file storage; invitation-only access with roles; two-step verification for admins and site managers; optional company sign-in; a tamper-evident record with outside timestamps; daily backups kept for seven days; and a nightly automated security check.
5. Subprocessors
The Customer authorizes the subprocessors listed on the Security & Trust page (Supabase, Resend, Stripe, Apple, DigiCert/FreeTSA, Microsoft Azure). VectorXPro will give at least 30 days' notice by email before adding or replacing a subprocessor that handles the Customer's personal information, and the Customer may object on reasonable grounds; if we cannot resolve it, the Customer may cancel and receive a refund of prepaid fees for the unused period. VectorXPro holds each subprocessor to data-protection terms no less protective than this DPA.
6. Where data is kept
The Customer's records and files are stored in the United States.
7. Security incidents
If VectorXPro confirms unauthorized access to the Customer's personal information, it will notify the Customer's Organization Admins without undue delay and within 72 hours of confirming it, with what happened, what data was involved and what is being done, and will help the Customer meet any notification duties it has.
8. Return and deletion
Throughout the subscription the Customer can print or save its evidence packs. When the Customer closes its account, VectorXPro deletes its records and files, including the backup copies of its files, within 30 days, except where the law requires them to be kept, and confirms deletion in writing on request. Backups roll off within the following seven days.
9. Audits
VectorXPro will answer the Customer's reasonable security questionnaires and make available the information needed to show compliance with this DPA, including its subprocessors' current security reports where they allow sharing.
10. Order of precedence
If this DPA and the Terms of Service conflict on the protection of personal information, this DPA applies.
Contact
VectorXPro LLC · Craig Reed, owner · Salina, Kansas · support@vectorxpro.com