When you use Orvium to talk to your customers, you are the controller of their personal data and Orvium is your processor. Ley 21.719 requires that relationship to be governed by a written agreement. That agreement is our Data Processing Agreement (DPA).
What the DPA covers
- The subject matter, duration, nature and purpose of the processing, and the categories of data and data subjects involved.
- Our commitment to process personal data only on your documented instructions.
- Confidentiality obligations for everyone at Orvium with access to the data.
- The security measures we apply, and our duty to help you respond to security incidents.
- The rules for engaging subprocessors, including advance notice of any change and your right to object.
- Our duty to assist you when one of your customers exercises an ARSOPB right.
- What happens at the end of the contract: return or deletion of the data, at your choice.
- Audit and information rights, so you can verify that we do what this says.
- The safeguards applied to international transfers.
Get the DPA
[REVISIÓN LEGAL PENDIENTE] The DPA text is being drafted and reviewed by counsel. Until it is published here as a downloadable document, request the current draft by writing to privacidad@orvium.ai and we will send it within two business days. This page will be updated with the signed version and a download link before 1 December 2026.
The list of subprocessors referenced by the DPA is public and versioned at Subprocessors. The security measures it refers to are described at our Trust Center.
If you are an individual, not a customer
The DPA governs our relationship with business customers. If you simply want to know what Orvium does with your data, read the Privacy Policy, or go straight to Exercise your rights.