Data Processing Agreement

Document version 2026-07-14-v1 · effective 2026-07-14.

This DPA forms part of our contract when you (the Customer) use einvoicecheck.eu to validate invoice data on behalf of your organisation. You are typically the controller of personal data in invoice XML; we act as processor for that data in transit. We are controller for account and billing data — see the Privacy Policy.

1. Subject matter and duration

Processing of invoice payloads and related metadata solely to provide validation and VAT-check APIs for the duration of your account plus any legally required retention.

2. Nature and purpose

Automated validation of structured invoices and optional VIES lookups. Invoice XML is processed in memory and not stored after the request completes.

3. Types of personal data

May include business party names, addresses, tax identifiers, and other fields present in invoices you submit.

4. Categories of data subjects

Your customers, suppliers, and employees whose data appears in submitted invoices.

5. Processor obligations

• Process only on documented instructions (these Terms, this DPA, and your API requests).
• Ensure confidentiality of personnel with access.
• Implement appropriate technical and organisational measures (TLS, access control, EU hosting, key hashing).
• Assist with data-subject requests where feasible.
• Notify you without undue delay after becoming aware of a personal-data breach affecting your data.
• Delete or return data on account termination subject to legal retention.
• Make available information necessary to demonstrate compliance.

6. Sub-processors

Authorised sub-processors: Netcup (hosting/DB), Resend (email), Lemon Squeezy (billing), European Commission VIES (VAT checks). We will inform you of material changes; you may object on reasonable grounds.

7. International transfers

As described in the Privacy Policy — SCCs or equivalent where required.

8. Acceptance

Clicking “I agree” at sign-up or checkout, or continuing to use the API after this DPA is published, constitutes acceptance. Enterprise customers may request a countersigned copy at support@einvoicecheck.eu.