Legal · for Team plan customers
Data Processing Agreement.
Standard DPA for Team plan customers who need a signed agreement for their compliance program. GDPR-aligned with SCCs included.
Most customers do not need this. Quorum runs on your machine — your code, prompts, and sessions never reach our servers. The DPA covers the limited data we DO process (your account email, license, billing). If your compliance team requires a signed DPA, this is it.
How to get a signed DPA
- Request the template: email [email protected] — the DPA template is being finalized and is available on request
- Review with your DPO or counsel
- Email signed PDF to [email protected] with your company info
- We countersign within 5 business days and send back
What the DPA covers
- Description of processing (limited to account data, license, billing)
- Categories of data subjects (your employees who use Quorum)
- Categories of data (email, name, company, license seat allocation)
- Sub-processor list (with notification rights for additions)
- Standard Contractual Clauses for any non-EU transfers
- Security measures (TLS in transit, AES-256 at rest, access controls)
- Incident notification (within 72 hours)
- Audit rights (annual, with notice)
- Return/deletion on termination
What it does NOT cover (because we do not process it)
- Your source code (never leaves your machine)
- Your prompts or AI provider traffic (direct user-to-provider)
- Your terminal session content
- Your Git history
Those data flows are between you and your AI providers (Anthropic, OpenAI, Google). Each has its own DPA.
For Free / Pro plan customers
We do not sign individual DPAs at the Free or Pro tier. The Privacy Policy on this site is the governing document. If your compliance team requires a signed DPA, upgrade to Team plan.
Questions
Email [email protected]. We aim to respond within 2 business days.