Our standard DPA, incorporating the EU Standard Contractual Clauses (Module 2 — Controller to Processor) and the UK addendum, is available for download below.
Mente Flow Automation, Ltd. (UK) is the processor; you are the controller. Personal data is processed exclusively to provide the services described in your engagement letter. We do not sell, share for advertising, or repurpose your data.
By default, processing occurs in your chosen region (EU, UK, US). Where data crosses the EEA/UK boundary, it does so under the SCCs & UK Addendum, with supplementary measures including encryption in transit and at rest, no commercial decryption keys held outside the destination region, and a documented Transfer Impact Assessment available on request.
Most clients sign our standard DPA as‑is. For redlines, send to dpa@menteflow.com; turnaround is typically 3–5 business days. We do not require a paid engagement to sign — we'll DPA in advance of an audit.
A free 30‑minute audit. We map your tooling, identify the three highest‑ROI automations, and tell you which to build first.