Data processing agreement

Data processing agreement (DPA) template

RunCode Inc. signs a standard data processing agreement on request. The customer is the controller and RunCode Inc. is the processor; the terms below cover GDPR and India's DPDP Act 2023. Ask for a copy through the contact page.

By the OnlineCompiler.io team. Updated .

This is a template for review and signature, not legal advice. Have your own counsel review it before you sign.

Parties

The customer, as controller, and RunCode Inc. (USA), as processor, which operates OnlineCompiler.io. To request a copy for signature, use the contact page.

Subject matter, duration and data

  • Subject matter: running the code the customer sends and returning the results.
  • Duration: for as long as the customer uses the service under its agreement with us.
  • Categories of data: code, inputs, outputs, account details, and any identifiers the customer includes in them.
  • Data subjects: the customer's users.

Instructions and confidentiality

We process personal data only on the customer's documented instructions, which are the agreement, the DPA and the customer's use of the service. People who handle the data are bound by confidentiality.

Security measures

The measures we apply are described on the security page: a separate gVisor container for each run, no network, an unprivileged user, a read-only filesystem, fixed limits, encrypted transport and key controls.

Sub-processors

The current list is on the sub-processors page. We give prior notice of changes, and the customer may object to a new sub-processor.

Data-subject requests

We assist the customer in answering requests from data subjects, such as access, correction and deletion.

Breach notification

We notify the customer without undue delay after becoming aware of a personal data breach affecting its data.

Retention, deletion and return

Retention matches the Privacy Policy: execution history is kept while the account is active and deleted with it. At the end of the agreement we delete the customer's data, or return it on request, and database backups expire within 30 days. Backups are kept on our servers in the European Union and then deleted. Other items follow the periods in the Privacy Policy (for example, share links last their 90 days).

Audits

We show compliance through documentation and answers to reasonable questionnaires. We hold no SOC 2 or ISO 27001 certification.

Transfers and applicable law

  • Where personal data is transferred out of the European Economic Area, the EU Standard Contractual Clauses apply where needed.
  • The agreement applies GDPR and, alongside it, India's Digital Personal Data Protection Act 2023.

Frequently asked questions

Does OnlineCompiler.io offer a data processing agreement?

Yes. RunCode Inc. signs a standard DPA on request, with the customer as controller and RunCode Inc. as processor. Ask through the contact page.

Does the DPA cover GDPR and India's DPDP Act?

Yes. It applies GDPR and, alongside it, India's Digital Personal Data Protection Act 2023, with the EU Standard Contractual Clauses for transfers where they are needed.

How long is customer data kept?

As the Privacy Policy says: execution history is kept while the account is active and deleted with it.