LEGAL

Data Processing Addendum

Last updated May 2025. This DPA forms part of the agreement between Capsule and customers acting as data controllers.

Roles

Customer is the data controller; Capsule is the data processor for personal data contained in trace data.

Subprocessors

We maintain a current list of subprocessors and provide notice of changes. Enterprise customers may request the full list.

Security measures

Capsule implements technical and organizational measures consistent with SOC 2 Type II and ISO 27001.