Data processing addendum

Last updated 2026-05-08

This page is a placeholder for the production data processing addendum. The authoritative document is maintained by counsel and replaces this page before general availability. If you need a signed DPA today for a pilot or beta engagement, email [email protected] and we'll send you the current draft.

Summary (non-binding)

• You (the customer) are the data controller. ContextWell is the data processor for customer content you put in your workspace.
• We process customer data only to operate the service, on your instructions.
• We do not sell, share, or use customer content to train AI models.
• Sub-processors are listed below and updated as our infrastructure changes.
• We support data export and deletion requests at any time.
• We notify customers of confirmed data incidents without undue delay.

Sub-processors

Today we rely on:

• Fly.io — application hosting, managed Postgres, object storage.
• Cloudflare — DNS and edge.
• Postmark (or equivalent) — transactional email.

Updates to this list will be posted here and announced to admin users 30 days in advance where contractually required.

Cross-border transfers

During beta, customer data is hosted in US regions. EU region selection is on the roadmap for the Enterprise tier. Where required, transfers rely on the EU Standard Contractual Clauses, executed as part of the production DPA.

Questions: [email protected].