Legal information
Data Processing Agreement (DPA)
Terms governing the processing of personal data entrusted to Mail by Yodev.
Purpose and duration
For the duration of the service and the stated retention periods, Yodev processes the data required to deliver transactional messages on behalf of the customer acting as controller.
Instructions
Yodev acts only on documented instructions arising from the contract, workspace configuration, and lawful API requests, unless a contrary legal obligation applies and notification is permitted.
Confidentiality and security
Access is restricted, secrets are encrypted, attachments are temporary and scanned, queues receive only opaque identifiers, and sensitive administrative operations are audited.
Subprocessors
The customer authorizes the providers published in the subprocessor list. Material changes are notified within a reasonable period to allow a reasoned objection.
Assistance
Yodev provides reasonable assistance with data-subject rights, security, data breaches, impact assessments, and authority requests, taking into account the nature of the processing.
End of service and audit
At the end of the service, data is deleted according to the published periods unless retention is legally required. Yodev provides information reasonably necessary to demonstrate compliance, subject to confidentiality and proportionality.
Last updated: August 17, 2026.