Data Processing Agreement

This page summarizes the terms under which CyberDairy processes personal data on behalf of a client (for example, author, reviewer, or reader data within a hosted OJS installation). A full, signed Data Processing Agreement is available on request for institutional clients with specific compliance requirements.

Roles

For hosted journals, the client (journal or publisher) is generally the data controller for editorial data such as author, reviewer, and reader information, and CyberDairy acts as a data processor providing infrastructure and technical services.

Processing Instructions

We process personal data within a hosted installation only as necessary to provide the agreed service (hosting, maintenance, support) and according to your instructions as the controller.

Subprocessors

Where infrastructure providers (e.g. server/hosting providers) are used as subprocessors, we select providers with appropriate security practices and can provide details on request.

Security Measures

See our Data Security page and Security Policy for the technical and organizational measures applied.

Institutional Requirements

If your institution requires a specific, signed Data Processing Agreement (e.g. for GDPR or similar regulatory compliance), contact us and we'll work through that separately from this general summary page.