Data Processing Agreement (DPA)

This Data Processing Agreement ("Agreement" or "DPA") is entered into between:

BLUE SKY SOFTWARE LTD, registered at 1 Kinyras Street, Kinyras Tower, 3rd Floor, 1102 Nicosia, Cyprus ("Processor" or "Gorilla"), and the customer identified in the applicable Order Form ("Controller" or "Customer"),

Each a "Party" and collectively the "Parties".

This DPA forms part of and is subject to the Master Subscription Agreement ("MSA") between the Parties and reflects the Parties' agreement with respect to the processing of personal data by Gorilla on behalf of Customer.

1. Subject Matter and Purpose

The subject matter of this Agreement is the processing of personal data by Gorilla on behalf of Customer for the purpose of providing the Gorilla SaaS platform, which integrates with Customer’s 1Password tenant to analyze security configurations, usage patterns, and data exposure.

2. Duration

This Agreement remains in effect for as long as Gorilla processes personal data on behalf of the Customer under the MSA.

3. Nature and Purpose of Processing

Gorilla processes personal data for the following purposes:

  1. To provide and maintain the Gorilla SaaS platform and its features.
  2. To generate reports and surface security insights on the Customer’s 1Password tenant.
  3. To provide support and communicate with the Customer.
  4. To fulfill legal obligations and protect Gorilla's legitimate interests.

4. Categories of Data Subjects

5. Categories of Personal Data Processed

The DPA under the GDPR governs the processing of personal data only. While Gorilla may also process non-personal technical data, only personal data, as defined under GDPR, is subject to this Agreement.

In the context of operating the Gorilla platform, the following categories of personal data may be processed: