GDPR Article 28

GDPR Data Processing Addendum (DPA)

Standard contractual clauses and technical and organisational measures governing Tarno processing of community participant metadata.

Get Started Free View Pricing

Scope & Processing Obligations

Processor processes personal data solely to execute automated community moderation, roster synchronization, and communication workflows authorized by Controller.

Technical & Organisational Measures (TOMs)

Data is protected via TLS 1.3 encryption in transit, AES-256 encryption at rest, containerized session isolation, and strict access controls.

Authorized Sub-Processors

Sub-processors include Google Cloud / Firebase (EU/US Hosting & DB), Stripe Inc. (PCI-DSS Payments), OpenAI LLC (Ephemeral Moderation), and Meta Platforms (WhatsApp Protocol).

Frequently Asked Questions

Who is the Data Controller and Data Processor?

You (the community manager or organization) are the Data Controller. Tarno is the Data Processor.

Related Solutions & Resources

Privacy Policy — Read full privacy and data governance details.
Terms of Service — Review service terms and agreements.

© 2026 Tarno (tarno.app). Tarno is a WhatsApp community moderation and CRM platform.

Home • Pricing • Moderation • CRM • Sitemap • AI Reference