Data Processing Agreement
Data Processing Agreement
Last updated: 2026-09-10
This DPA forms part of the SteboHost Terms of Service and governs the processing of personal data on behalf of customers.
1. Roles
SteboHost acts as a data processor. The customer acts as a data controller.
2. Processing Scope
We process personal data only as necessary to provide the Services described in the Terms of Service, in accordance with the customer's instructions.
3. Security Measures
We maintain appropriate technical and organizational measures including:
Encryption in transit and at rest
Access controls with MFA
Audit logging
Regular security assessments
Incident response procedures
4. Subprocessors
We engage subprocessors listed in our Privacy Policy. We provide 30 days' notice before engaging new subprocessors.
5. Data Breach Notification
We notify customers of personal data breaches within 72 hours of becoming aware, in accordance with GDPR Article 33.
6. Data Return and Deletion
Upon account termination, we delete customer data within 90 days, except where retention is required by law.
7. Contact
For DPA inquiries: support@stebohost.com · +254 703 610 464
Questions about this document? Contact support@stebohost.com or call +254 703 610 464.