Legal

Data Processing Agreement

Last updated · 1 July 2026
Draft — pending legal review

For customers who require a formal agreement covering how Oreana processes personal data on their behalf.

Roles

You are the controller of the personal data you entrust to Oreana. Oreana acts as your processor, handling that data only on your documented instructions.

Processing

Oreana processes personal data solely to provide the service, within Switzerland, under the security measures described in the Trust Center.

Subprocessors

The infrastructure and service providers Oreana relies on are listed on the Subprocessors page. We give notice before adding a new one.

Your rights

We assist you in meeting your obligations to the people whose data you hold — access, correction, deletion, and portability.

Requesting a signed DPA

Write to compliance@oreana.ai.