Legal & Trust Center
Data Processing Addendum
Version 1.0 describes how Ethen works today. It has not yet taken effect: passages shown in italics are still being decided, and the document will show an effective date once it is final. Earlier text is listed in the version history.
This page explains whether a data processing addendum (DPA) is available for Ethen, and which documents organizations can review in the meantime. A DPA is a contract between a business customer and a service provider that sets out how the provider processes personal data on the customer's behalf. It typically covers processing instructions, confidentiality, security, subprocessors, assistance with individuals' rights, breach notification, deletion, audits and international transfers. This page is for organizations, procurement teams and privacy reviewers.
On this page
Availability
Upcube does not yet offer a data processing addendum. When one is available, this page will describe how to request or accept it.
Upcube will not describe any document as a DPA until it has been prepared with qualified legal counsel. No binding data processing terms are published on this page.
What you can review today
| Document | What it covers |
|---|---|
| Privacy Policy | What personal data Ethen processes, why, where it goes, and individuals' rights |
| Subprocessors | Each third-party company that processes data for Ethen, its purpose, products and location where confirmed |
| Data Retention Policy | How long each category of data is kept, what deletion does, and where provider retention differs |
| Enterprise Security | The security controls in place today and their limits |
| Enterprise Security | Architecture, data boundaries and current limitations for organizational review |
| Terms of Service | The agreement governing use of Ethen |
Facts relevant to a DPA review
- Ethen's database and file storage are hosted in the United States, in AWS us-west-2 through Supabase.
- AI model, search and media providers process requests under their own terms with Upcube or with the routing service between them. Their processing locations are determined by them.
- Ethen does not currently offer Organization accounts, administrator controls, regional data residency, or customer-specific retention schedules.
- Ethen does not hold security certifications.
Requests
Organizations that need a DPA can register their interest through the contact options in the Legal & Trust Center.
Contact
Dedicated contact channels for privacy, security, legal, support and abuse reports are being set up and will be listed here before Ethen's policies take effect.
Version history
| Version | Date | Status | Summary of changes |
|---|---|---|---|
| 1.0 | October 5, 2026 | Not yet in effect | Availability page. No binding addendum is published. |