Certivo Legal
Agreements, policies, and trust documents
Everything a customer, partner, or reviewer needs to understand how Certivo contracts, protects data, and operates. Each document is versioned. Signed Service Orders and Statements of Work reference the version in effect on the date of signature.
Customer agreements
SaaS Agreement
Master terms for all signed Certivo subscriptions. Includes Exhibit A (Service Level Addendum) and Exhibit B (Data Processing Addendum). Incorporated by reference into every Service Order and Statement of Work.
Data Processing Addendum
How Certivo processes personal data on your behalf under GDPR, U.K. GDPR, Swiss DPA, CCPA, and U.S. state privacy laws. Includes Standard Contractual Clauses, the U.K. IDTA, and security measures. Also available as a separately signable document.
Service Level Addendum
99.5% monthly availability commitment, service credits, support hours, and error response targets.
Terms of Service
Click-through terms for trial, evaluation, and self-serve use of Certivo. Customers with a signed Service Order, Statement of Work, or SaaS Agreement are governed by the SaaS Agreement instead.
Privacy and trust
Privacy Policy
How Certivo collects and uses personal information from website visitors, prospects, and users. Includes EU and U.K. GDPR representative details.
Trust Center
SOC 2 Type II report, security policies, penetration test summaries, and compliance documentation. Access on request.
Sub-processors
Current list of third parties that process customer data on Certivo's behalf, with location and purpose. Updated with 10 days' notice per the DPA.
How Certivo contracts
Most customers sign one short document. The legal terms live here so you only review them once.
- Service Order or Statement of Work. A short commercial document with your scope, fees, term, and contacts. This is what you sign.
- SaaS Agreement. The legal terms above, incorporated by reference. Signing your Service Order or SOW constitutes acceptance. No separate signature needed.
- Data Processing Addendum. Part of the SaaS Agreement as Exhibit B. If your privacy team needs a separately signed DPA, request the standalone version and we will countersign it.
Order of precedence: your signed Service Order or SOW controls for commercial terms. The Data Processing Addendum controls for data protection. The SaaS Agreement body governs everything else.
Version history
| Version | Effective | Summary |
|---|---|---|
| 3.0 | September 2, 2026 | SaaS Agreement and DPA combined into one document. Order Form replaced by Service Order and Statement of Work. Added Section 12.11 (Affiliate Deployments). Exhibits renumbered. |
| 2.0 | January 14, 2025 | Separate SaaS Agreement and DPA with attached Order Form. Available on request. |
Questions
Contract or privacy questions: legal@certivo.com. Security questionnaires and audit requests: Trust Center.