Contracts and information
DPA, SLA and TOM at a glance: what they cover and where you accept them.
The three contract documents
AVV: data processing agreement
The data processing agreement (Auftragsverarbeitungsvertrag, AVV) governs how DASon processes personal data on behalf of your business: on your instructions, with a defined circle of people who have access, and with notification of data breaches. It also sets out what happens to the data after the contract ends.
SLA: service levels
The service level agreement describes the availability of the platform, maintenance windows, support response times and how disruptions are communicated.
TOM: technical and organisational measures
The technical and organisational measures describe how data is protected, for example through roles and permissions, separation of tenants, logging, encryption and backups.
Where you accept the contracts
You accept AVV, SLA and TOM together in the dashboard under Company > Contracts. There you read the full text before accepting, and later you can see the accepted version. Signing in is required.
Go to Company > Contracts (Login required)
Hash verification archive
A hash verification archive can optionally be agreed (AVV section 13). The authenticity of your certificates can then still be checked after the company has been deleted. Only a hash that cannot be reversed is archived.