status — not yet published

There is no DPA on this page yet. Owner: founder + counsel. Blocking gate: legal review, before public launch.

If your procurement process needs a DPA signed before a pilot, email hello@evalyst.ai and we’ll handle it directly rather than pointing you at a page that isn’t ready.

Expected to cover: the controller/processor relationship and the scope of processing, the subprocessor list and how changes to it are notified, security measures (the substance of which is on the security page today), breach notification timelines, assistance with data-subject requests, international transfer mechanisms, and deletion or return of data on termination.

A DPA is a contract about how data is handled. It is not a certification, and we don’t present it as one — see what we don’t claim.