Edit with
Data Processing Agreement (DPA) v1.0
Platform v4.1 · Issue Date: 2026-05-06 · Ref: SATCLIMATE-DPA-2026-001
GDPR Art. 28 Compliance · Institutional Document
SatClimate Intelligence Platform — Carbonaa SA
Version: v1.0
Platform: v4.1
Issue Date: 2026-05-06
Ref: SATCLIMATE-DPA-2026-001
Governing Law: Swiss Law · Geneva
5
Processing Activities
8
Technical Measures
4
Sub-Processors
PA-01 · API Authentication & Key Management
Purpose: Validate client identity and enforce quota limits for platform access
Legal Basis: Contractual necessity (Art. 6(1)(b) GDPR)
Retention: 12 months post-subscription expiry
PA-02 · Subscription Billing & Payments
Purpose: Process subscription fees via Stripe, issue invoices, manage refunds
Legal Basis: Contractual necessity (Art. 6(1)(b) GDPR)
Retention: 10 years (Swiss accounting obligation)
PA-03 · Signal Delivery AuditLog
Purpose: Immutable audit trail for every signal generated — required for institutional compliance, SIIS pillar 07
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)
Retention: Stored indefinitely pending formal retention policy (discussed below)
PA-04 · KYB (Know Your Business) Verification
Purpose: Institutional client due diligence for higher plans; required for correct processing accreditations
Legal Basis: Legitimate interest + contractual necessity (Art. 6(1)(b/f) GDPR)
Retention: 5 years post-contract termination
PA-05 · Methodology Acknowledgement Log
Purpose: Record that clients acknowledged the methodology disclaimer — legal protection for Carbonaa SA
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)
Retention: 10 years (evidence preservation)
API Key Hashing
API keys stored as SHA256 hashes only — plaintext never persisted
Redis Circuit Breaker
Fail-closed circuit breaker — if Redis unavailable, quota enforcement returns 503, never serves unprotected quota
Encrypted Data at Rest
Base44 platform infrastructure — all data encrypted at rest (TLS 1.3)
Role-Based Access Control
Admin users only — no shared credentials
AuditLog Immutability
AuditLog entries cannot be retroactively deleted — provides compliance evidence
GDPR Request Workflow
GDPRRequest entity with verification code + manual review before data export or deletion
Data Retention Policies
DataRetentionPolicy entity configured per entity type
Security Audit Logging
SecurityAuditLog records all admin actions, data exports, privilege escalations
Stripe Inc. (United States)
Purpose: Payment processing & subscription billing
Transfer Mechanism: EU-U.S. Data Privacy Framework (DPF) + SCCs (Standard Contractual Clauses)
Legal Basis: Art. 28 (processor) + Commission Decision 2023/104
Base44 (infrastructure provider)
Purpose: Cloud data hosting, backup, authentication, API infrastructure
Transfer Mechanism: EU-U.S. DPF + SCCs — contractual safeguards included in SaaS agreement
Legal Basis: Art. 28 (processor) + contract
Open-Meteo (Switzerland)
Purpose: Climate data API
Transfer Mechanism: Swiss data protection alignment — no data transfer required
Legal Basis: Art. 49(1)(h) (public interest)
OpenAQ (non-profit, distributed)
Purpose: Atmospheric emissions data API
Transfer Mechanism: Public dataset — no personal data transferred
Legal Basis: Art. 49(1)(a) (data subject consent implicit for public reporting)
Right of Access (Art. 15)
Data subjects may request a copy of their data. GDPRRequest workflow with verification.
Right of Erasure (Art. 17)
Data subjects may request deletion. Carbonaa processes within 30 days, except where legal obligation requires retention.
Right of Rectification (Art. 16)
Data subjects may correct inaccurate data.
Right to Object (Art. 21)
Data subjects may object to processing on legitimate interest grounds.
SATCLIMATE-DPA-2026-001 · DPA v1.0 · Platform v4.1 · SatClimate / Carbonaa SA · Geneva, Switzerland · amin@carbonaa.net
This DPA is incorporated into and subject to the SatClimate Terms of Engine v3.0. Governing law: Swiss Law, Canton of Geneva.