TrustPort Beacon · Legal information
Data processing & DPA
Last updated: 26 October 2026
This page is a service overview, not a signed or binding data processing agreement (DPA). Customer telemetry may include personal data. Depending on the customer’s instructions and the actual service configuration, the customer may be controller and TrustPort Identity LLC may be processor for that telemetry. Roles can differ for account, security, billing and product operations.
Before a customer sends personal data
The parties should execute an appropriate written DPA and order that accurately specify the processing subject matter and duration, nature and purpose, data types and individuals, instructions, confidentiality and security, subprocessors, rights-request and breach assistance, audits, international transfers, and end-of-service return/deletion. UK GDPR Article 28 guidance describes minimum processor-contract terms; see the ICO contract guidance.
Information still to publish
- Approved DPA text and electronic execution process.
- Named, current subprocessor list with service purpose, entity and processing locations.
- Verified security measures and incident notification process.
- Production data-region, transfer and backup/deletion details.
- Customer request route and response commitments.
For procurement or a DPA request, use the contact form. This page does not itself satisfy a customer’s contractual or legal requirements.