Glossary · Security, trust and compliance
Data processing agreement (DPA)
The contract terms governing REAP’s processing of personal data on a customer’s behalf, including subprocessors, transfers and deletion.
In REAP
On request; aligned to GDPR (opens in a new tab), UK GDPR (opens in a new tab) and CCPA (opens in a new tab)/CPRA.
Related terms
More in security, trust and compliance
- Audit scope
- CSA STAR, CAIQ and SIG
- CVE (Common Vulnerabilities and Exposures)
- Encryption in transit and at rest
- GDPR, UK GDPR and CCPA/CPRA
- HIPAA and PHI
- IAM (identity and access management)
- ISO/IEC 27001 and 42001
- Key management service (KMS)
- Lateral movement
- Multi-factor authentication (MFA)
- NERC CIP
- NIST Cybersecurity Framework (CSF)
- OWASP and ASVS
- PCI DSS
- Penetration test
- SAML and OIDC (single sign-on protocols)
- Secure software development (SSDF) and SBOM
- Security packet
- security.txt
- Server-side request forgery (SSRF)
- SOC 2 Type I and Type II
- SOC 2 Type II
- Subprocessor
- Trust Center
- Vulnerability disclosure
Bring us your last P1.
Keep the root cause to yourself; in a 30-minute session we walk through how REAP would have investigated it, evidence first. The replay on your own network happens inside the proof of value.