0.20.0

A data processing addendum, and the documents behind it

Our DPA is published and in force. Alongside it we have published the sub-processor register, a transfer impact assessment, our data loss prevention policy and our security incident response plan, plus the privacy policy and terms.

Every one of them is downloadable from Settings → Documents in the dashboard. If you need a compliance pack for your own records, or for a customer asking you the same questions, it is there without an email thread.

Every connector now says who delivers it

Connectors are marked Native or Delivered through Composio, in the connector directory, on each connector's page, and on the public site.

Native means we call the platform directly and nothing in the request or response is retained by anyone but that platform. Composio is our connectivity sub-processor: those requests pass through their infrastructure to reach the platform, and they retain the payloads under their own practices. Clause 7.4 of the DPA covers it.

This is the fact worth knowing before you connect something sensitive, so it is now on the connector rather than in a document you would have to go and find.