Data Processing Agreement
Connect Wasl is built to align with the Saudi Personal Data Protection Law (PDPL). When you use Connect Wasl to message your customers, you are the controller of that data and we are your processor. We sign a PDPL-aligned Data Processing Agreement (DPA) that sets out our obligations.
What is a Data Processing Agreement?
A Data Processing Agreement (DPA) is a contract between you (the business using Connect Wasl) and Connect Wasl that governs how we process personal data on your behalf. It sets out our obligations as your processor under the Saudi PDPL.
Are you a controller or a processor?
For the customer conversations you handle through Connect Wasl, you are the controller and we are your processor: we process that data only on your documented instructions. We are a controller only for our own account and billing data.
What does your DPA cover?
Processing only on your documented instructions, confidentiality, security measures (see our trust and security page), use of sub-processors, assistance with data-subject requests, cross-border transfers under Saudi Standard Contractual Clauses, breach notification to you within 24 hours, and deletion or return of data when our agreement ends.
Where is data stored, and is it transferred abroad?
Our database is in the EU (Supabase, Frankfurt). Some sub-processors are in the United States, so some data is processed there under appropriate safeguards. Our sub-processors and their regions are published.
How do I get your DPA?
Email info@connectwasl.com and we will send our PDPL-aligned DPA for signature. We provide it on request and sign it per client; we do not publish the executable document.