Data Processing Agreement
Last updated October 21, 2026
Business and Enterprise customers who need a data processing agreement (for example under the GDPR or UK GDPR) can request one. It covers the personal data of your team that CircuitMCP processes for you.
Requesting a DPA
Email support@circuitmcp.net with your organization's legal name and the name of its signatory, and we will send our DPA for signature. Enterprise customers can negotiate changes as part of their agreement.
What it covers
| Personal data | Your members' names and email addresses, roles, sign-in and security logs, the hostnames and Windows versions of machines using your license, IP addresses seen by our servers, and billing contacts. |
| Not included | Design data. CircuitMCP runs on your machines and never sends design files, file names or project contents to us. |
| Purpose | Providing accounts, organizations, license enforcement, downloads, billing and support. |
| Location | United States, on servers we operate. |
| Security | As described on our security page. |
Subprocessors
| Subprocessor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payments, invoices, billing portal | United States |
| Cloudflare, Inc. | Turnstile bot checks on public forms | Global |
| Microsoft Corporation (Azure) | Network edge forwarding encrypted traffic, without decrypting it | United States |
Customers with a signed DPA are told about new subprocessors by email before they start, and this list is kept current. See also our privacy policy.