GDPR & Data Processing Agreement (DPA)

Stackhero is a European company based in France, and the General Data Protection Regulation (GDPR) is an integral part of how we design and operate our managed cloud services. This page explains, in straightforward terms, how Stackhero approaches data protection and where you can find our Data Processing Agreement.

Controller and processor

Under the GDPR, you, as our customer, are the data controller: you decide which personal data you store and process on the services you deploy with Stackhero. Stackhero acts as a data processor: we process this data on your behalf to ensure the operation of the services you use.

Data Processing Agreement (DPA)

Our Data Processing Agreement describes how Stackhero processes personal data on your behalf as a processor. This document is part of our Terms of Service and applies automatically when you use Stackhero, so there is nothing for you to sign or return.

You can download the Stackhero DPA for your records here: Download the DPA (PDF).

Where your data is hosted

Stackhero operates data centres in several regions. The data for a service is hosted in Europe only if that service is launched in a European region. You choose the region when you create the service, and that choice determines where your data is hosted.

Your data protection rights

The GDPR grants individuals rights over their personal data, such as access, rectification, portability, and erasure. As the processor, Stackhero provides you, as the controller, with the tools and support you need to respond to requests from your own users. For personal data that Stackhero holds about you as our customer, such as your account information, please refer to our Privacy Policy.

Security and certifications

Effective data protection relies on strong security. Stackhero is certified ISO 27001:2022. You can learn more on our certifications page.

Contact

If you have any questions about data protection or this page, please contact our team at privacy at stackhero dot io.

About this page

This page is provided for general information purposes only. It is not a contract and does not create any obligation beyond those set out in our agreements. Our Terms of Service and the Data Processing Agreement are the binding documents, and they take precedence in case of any discrepancy with this page.