Data Processing Addendum
Last updated: June 12, 2026
Draft — pending legal review. This is a good-faith first draft that matches how Viewport actually handles your data, but it has not yet been reviewed by counsel and is not final. We will update the “Last updated” date once it has. Questions? Email [email protected].
When you need this
This Data Processing Addendum (“DPA”) is for business customers who need a signed agreement governing how Viewport processes personal data on their behalf — typically required by security or procurement review. It forms part of, and is governed by, our Terms of Service. To execute a countersigned copy, email [email protected].
1. Roles of the parties
For account data and the session metadata Viewport processes to run the Service, Viewport acts as a processor and you act as the controller. The daemon keeps your code, transcripts, and tool output on your machine; Viewport is neither controller nor processor of that content. Viewport processes personal data only on your documented instructions, which these Terms and your use of the Service constitute.
2. Categories of data and data subjects
Data subjects: your authorized users (engineers, reviewers, admins). Categories: account data (name, email, organization and team membership), session metadata (machine id, working-directory path, repo metadata, run status and summaries), and the audit ledger (governance decisions and timestamps). No special categories of data are processed by design.
3. Subprocessors
You authorize Viewport to engage the subprocessors below. We impose data-protection terms on each that are no less protective than this DPA, and we remain responsible for their performance. We will give notice of new subprocessors before they begin processing and give you a reasonable opportunity to object on data-protection grounds.
| Subprocessor | Role | Data | Location |
|---|---|---|---|
| DigitalOcean | Cloud hosting for the control plane and databases | Account data, session metadata, audit ledger | United States |
| Cloudflare | CDN, DNS, and edge for the marketing and app surfaces | Network/request metadata | United States (global edge) |
| WorkOS | Authentication and SSO (AuthKit) | Email, identity, organization membership | United States |
| Stripe | Payment processing and billing | Billing contact, payment metadata (no card numbers stored by us) | United States |
| E2B | Managed sandboxes for governed agent runs | Run inputs/outputs you direct into a managed sandbox | United States |
| Resend | Transactional email (invites, notifications) | Email address, message content | United States |
| Sentry | Error monitoring and diagnostics | Crash diagnostics, technical metadata | United States |
Integrations you connect (for example GitHub and Slack) process data under their own terms and at your direction; they are not Viewport subprocessors.
4. Security
Viewport maintains technical and organizational measures appropriate to the risk, including encryption in transit, edge encryption of context-vault bodies (we hold only ciphertext), scoped virtual keys for model access, least-privilege access controls, and audit logging. Our control plane is metadata-only by architecture, which limits the personal data exposed to it in the first place.
5. International transfers
Where processing involves transferring personal data out of the EEA, UK, or Switzerland, the parties rely on the EU Standard Contractual Clauses (and the UK Addendum / Swiss adaptations as applicable), incorporated by reference into this DPA, together with any supplementary measures reasonably required.
6. Data subject requests and assistance
Viewport will, taking into account the nature of processing, assist you in responding to data-subject requests and in meeting your security, breach-notification, and impact-assessment obligations. We will notify you without undue delay after becoming aware of a personal-data breach affecting your data.
7. Deletion and return
On termination, Viewport will delete or return personal data processed on your behalf, except where retention is required by law. Consistent with the Terms, your audit ledger stays exportable for 30 days after cancellation and is then deleted.
8. Audits
On reasonable request and subject to confidentiality, Viewport will make available information necessary to demonstrate compliance with this DPA, including relevant third-party reports as they become available (SOC 2 readiness today; certification is in progress).
Contact
Email [email protected] to request a signed copy or ask a question.