Data Processing Agreement (DPA)

Version: 3.0.0Effective Date: August 2026Last Updated: August 07, 2026

1. Purpose & Scope

This Data Processing Agreement ("DPA") applies where Your Travel Pals acts as a data processor or controller under GDPR, UK GDPR, and CCPA.

2. Approved Subprocessors

We utilize enterprise-grade subprocessing infrastructure subject to strict contractual data protection terms:

  • Cloud Infrastructure & Database: Amazon Web Services (AWS), Cloudflare, Supabase
  • AI & Machine Learning: OpenAI, Anthropic
  • Mapping & Geo-services: Google Maps API
  • Communications: Twilio
  • Payment Processing: Stripe