Last Updated: 15.11.2025

Data Processing Agreement (DPA)

This Data Processing Agreement ("Agreement" or "DPA") is entered into between:

BLUE SKY SOFTWARE LTD, registered at Archiepiskopou Makariou III, 59, MOUYIAS TOWER,

6017, Larnaca, Cyprus ("Processor" or "Gorilla"), and the customer identified in the applicable Order Form ("Controller" or "Customer"),

Each a "Party" and collectively the "Parties".

This DPA forms part of and is subject to the Master Subscription Agreement ("MSA") between the Parties and reflects the Parties' agreement with respect to the processing of personal data by Gorilla on behalf of Customer.

1. Subject Matter and Purpose

The subject matter of this Agreement is the processing of personal data by Gorilla on behalf of Customer for the purpose of providing the Gorilla SaaS platform, which integrates with Customer’s 1Password tenant to analyze security configurations, usage patterns, and data exposure.

2. Duration

This Agreement remains in effect for as long as Gorilla processes personal data on behalf of the Customer under the MSA.

3. Nature and Purpose of Processing

Gorilla processes personal data for the following purposes:

  1. To provide and maintain the Gorilla SaaS platform and its features.
  2. To generate reports and surface security insights on the Customer’s 1Password tenant.
  3. To provide support and communicate with the Customer.
  4. To fulfill legal obligations and protect Gorilla's legitimate interests.

4. Categories of Data Subjects