Data processing agreement (DPA)

Status as of September 14, 2026

A DPA is not available yet. No data processing agreement has been drafted or reviewed, so there is no document or template to download. We would rather say that than send you a placeholder.

What exists today

The Privacy Policy and Terms of Service, which name the operating entity, Instalabs LLC.
The sub-processor list: every third-party service that can receive data, what it does and when it applies.
The data boundary: what stays on your machine, what leaves it and who can read it, for each deployment.
The compliance status of SOC 2, ISO 27001, ISO 42001 and penetration testing.

If you need a DPA

Email legal@clawmetry.com with your organization, the deployment you plan to use (managed cloud, customer-hosted or local-only) and the terms your legal team requires. A request tells us a DPA is blocking a real evaluation, which is what moves it up the list. We will not describe any draft as an available DPA until it has been reviewed.

A customer-hosted deployment, or a local-only install with CLAWMETRY_OFFLINE=1, sends no agent session data to ClawMetry. That can take ClawMetry out of the data flow a DPA would cover. See /trust for exactly what each mode still sends.

← Compliance status

Cookie preferences