Final legal and security baseline documents for procurement

This page consolidates the core contract-side enterprise documents to accelerate legal and InfoSec review cycles: DPA/AVV, Security Annex, Data Processing Annex, and SLA commitments.

Version baseline - Last updated: 2026-05-02

core legal artifacts

Final

security annex baseline

Final

data processing annex baseline

Live

public trust references

DPA/AVV Template

Baseline processing agreement template with data handling and TOM orientation.

Reference: enterprise/AVV_DPA_TEMPLATE_V1_FINAL.md
Supports contract kickoff and legal redline workflow.

Security Annex v1 Final

Technical and organizational security controls baseline for managed hosted service.

Reference: enterprise/SECURITY_ANNEX_V1_FINAL.md
Covers governance, access, logging, resilience, and incident handling references.

Data Processing Annex v1 Final

Data processing scope, roles, categories, retention behavior, and subprocessor references.

Reference: enterprise/DATA_PROCESSING_ANNEX_V1_FINAL.md
Aligned for procurement and privacy review workflows.

SLA Commitments

Service reliability, support response, recovery targets, and service credit baseline.

Public route: /sla
Document reference: enterprise/SLA_V2_FINAL.md

Enterprise Trust Center Security Trust Page Security Questionnaire Security Questionnaire Top-30 v2 Subprocessors Request Legal Pack Review