Legal · DPA

Data Processing Agreement

This is a placeholder summary of how Fixly processes data on behalf of municipal customers. The signed DPA is included in your Master Services Agreement and is available on request for review.

  • Standard Contractual Clauses available
  • Sub-processor list maintained and notified on changes
  • Data residency options for qualifying cities
  • Customer-defined retention periods

Roles

Controller and processor

The municipality is the data controller for personal data submitted by its staff and residents. Fixly acts as a data processor and only processes that data according to the controller's documented instructions.

Sub-processors

How we manage sub-processors

We maintain a current list of sub-processors used to deliver the service (cloud infrastructure, transactional email, error monitoring). Customers are notified before any new sub-processor is added and may object per the terms of the DPA.

Retention & deletion

Data retention and deletion

Customer data is retained for the term of the agreement and deleted within the period specified in the DPA after termination. Residents' rights requests (access, correction, deletion) are routed to the controlling municipality and supported by Fixly tooling.

Ready to modernize your city operations?

Join the cities making service requests faster, transparent, and measurable.