Data Processing Agreement
1. Scope
This Data Processing Agreement (“DPA”) applies to the rendering of HTML content into PDF documents performed by pdfserve.eu (the “Processor”) on behalf of its customer (the “Controller”) under the parties’ service terms. It governs any personal data that transits the service as part of the Controller’s submitted HTML or URL inputs.
2. Zero content retention
The Processor does not persist customer-submitted template content, fetched URL bodies, or generated PDF output to any storage medium beyond process memory for the duration of the request. Rendering occurs in memory and the output is streamed back to the client. Worker processes are recycled after a bounded number of requests to prevent cross-request residue.
The Processor retains a content-free audit trail of render calls — timestamp, response status, output byte size, render duration, and the API key prefix used — for 90 days, after which entries are automatically deleted. This audit trail contains no template content and no PDF output, and exists so account holders can review their own render history. See /retention for the full schedule.
3. Sub-processors
Every entity in the data path is EU-controlled. The complete list:
| Function | Provider | Country |
|---|---|---|
| Compute, storage, database, DNS, registry | Scaleway | France |
| Payments | Mollie | Netherlands |
| Transactional email | Scaleway Transactional Email | France |
| Error monitoring | Self-hosted (Bugsink) | EU |
| Analytics | Plausible | Estonia / EU |
The Processor will give the Controller 30 days’ prior written notice (by email to the account contact) before adding any new sub-processor. The Controller may terminate the agreement without penalty within that window.
4. International transfers
No personal data submitted to the service leaves the European Union during rendering or as part of the audit trail. The Processor uses no US sub-processors in the data path.
5. Security measures
See the /security page for the technical and organisational measures in force.
6. Data subject requests
The Controller may exercise data-subject rights via written request to the address below; the Processor will respond within 30 days. As the Processor holds no document content, most requests reduce to providing or deleting the relevant audit-trail entries.
Contact
Data Protection Officer — dpo@pdfserve.eu