Data Processing Addendum & Security Documents

The Data Processing Addendum (DPA) is the contract that governs how Resolv processes personal data on behalf of your company. Under UAE Federal Decree-Law No. 45 of 2021 (PDPL), your company is the controller of its tenant data and Resolv is the processor — the DPA records that relationship and the obligations that come with it.

Processing only on your documented instructions, for the purposes of delivering the contracted service.

The technical and organisational security measures described on our Security page — tenant isolation, encryption, access control, PII redaction and the append-only audit trail.

The authorised subprocessor list, our obligation to update it before adding anything new, and flow-down of equivalent obligations to each subprocessor.

Cross-border transfer safeguards consistent with the PDPL, and regional data-residency options where contracted.

Breach notification without undue delay, in time for you to meet your own regulatory obligations.

Assistance with data-subject requests, and deletion or return of your data on termination.

Email hello@resolv.so with your company details and the DPA is issued for countersignature — our target is turnaround within 48 hours. Redlines from your legal team are reviewed rather than refused.

Available under NDA to active prospects and customers: the SOC 2 readiness summary, the cross-tenant isolation test evidence, the network and data-flow narrative, the business-continuity and disaster-recovery summary, and the AI safety and evaluation summary.

Request any of these at security@resolv.so, or through your sales contact. The full catalogue is listed on the Security page.