Legal
Data Processing Addendum
Roles (Controller / Processor)
For customer content processed on your behalf, you are the controller (or processor for your end users) and Xurel acts as processor.
Processing scope
Processing covers account data, sending metadata, message content you submit, and mailbox content for Mailbox seats — solely to provide the Xurel services.
Subprocessors
We maintain a list of subprocessors and will provide it on request.
Security measures
We implement administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit and access controls.
International transfers
Primary infrastructure runs in Singapore. Where transfers occur, we use appropriate safeguards required by applicable law.
Sign request
Request a signed DPA via privacy@xurel.co for commercial agreements that require one.