On May 22, 2018 we published our Data Processing Addendum (DPA). This article outlines the purpose of our DPA.
What our DPA covers
A Data Processing Agreement covers the data that a customer stores with Backblaze in using our services. We call this Stored Data. Backblaze is considered the Data Processor or Data Sub-Processor depending on the customer and how they acquired/use the data.
What does the DPA mean to a Backblaze customer?
On May 22, 2018 we updated our Terms of Service to include by reference our Data Processing Agreement. When a customer creates a Backblaze account they accept our Terms of Service. The Data Processing Agreement is now an addendum to the Terms of Service. As such, the DPA is now part of the Terms of Service for all existing customers and for all new customers going forward.
The DPA and GDPR
Our Data Processing Agreement is intended to comply with the requirements set forth in GDPR regarding our responsibilities in securing and protecting the privacy of the Stored Data we host. We retain the right to update the DPA as needed to stay in compliance with GDPR and other such rules and regulations which may effect how we store data.