DATA PROCESSING AGREEMENT

fingerprint.dev offers a custom Data Processing Agreement to enterprise customers. The DPA incorporates the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and California-specific addenda where applicable.

The DPA is executed alongside the Master Services Agreement for enterprise customers, and references our subprocessor list, security posture, and incident response commitments.

Procurement, privacy, and security teams can request the current DPA template by contacting sales. We share the DPA, current subprocessor list, and our SOC 2 program status under NDA.

Our Privacy Policy describes what fingerprint.dev processes on behalf of customers — hashed browser evidence, connection-level fingerprints (JA4, JA4T, JA4H, JA4X), and request metadata. No cookies are written, no PII is stored by default.

Data residency (EU-only or US-only processing) is configurable on enterprise plans.

Self-serve customers operate under the standard Privacy Policy and Terms of Service. Custom DPA terms are available when an enterprise contract is in place.