[{"data":1,"prerenderedAt":592},["ShallowReactive",2],{"bpyqRQk8K7_rRSCIF_1HgjC-kcVBfBNwIX8GFkkN2FU":3,"SB-_f1-GRNMO6gutVD5zmJ_TXPJ4MfkKTp_qws74ljY":308,"iHGHvWQprwYPmJst4BNDko93YhsbRrL_KWuNQaZL7Ew":554},{"data":4,"meta":307},{"id":5,"createdAt":6,"updatedAt":7,"text":8,"copyright":9,"documentId":10,"publishedAt":11,"policy_links":12,"col_1":34,"col_2":76,"col_3":114,"col_4":158,"col_5":201,"comparisons":240,"hide_element":289,"badges":37},1,"2022-12-27T12:24:01.493Z","2026-08-18T07:42:26.358Z","Whatagraph is the marketing intelligence platform built for scale — a single source of truth powering every report, dashboard, and AI tool your team uses.","[year] Marketing Intelligence Platform | Whatagraph. All Rights Reserved, Whatagraph B.V. ©","yh5sq4mqxgdjlj5di6ej6fq7","2026-08-18T07:42:25.700Z",[13,18,22,26,30],{"id":14,"title":15,"url":16,"open_new_tab":17},8,"Terms & Conditions","/terms-and-conditions",false,{"id":19,"title":20,"url":21,"open_new_tab":17},9,"Privacy Policy","/privacy-policy",{"id":23,"title":24,"url":25,"open_new_tab":17},10,"Cookie Policy","/cookie-policy",{"id":27,"title":28,"url":29,"open_new_tab":17},11,"Security Policy","/security-policy",{"id":31,"title":32,"url":33,"open_new_tab":17},32,"Data Processing Agreement","/data-processing-agreement ",[35,39,43,47,51,55,59,63,66,69,72],{"id":5,"title":36,"url":37,"open_new_tab":17,"is_heading":38,"margin_top":17},"Product",null,true,{"id":40,"title":41,"url":42,"open_new_tab":17,"is_heading":17,"margin_top":17},2,"All features","/features",{"id":44,"title":45,"url":46,"open_new_tab":17,"is_heading":17,"margin_top":17},69,"Data Hub","/data-hub",{"id":48,"title":49,"url":50,"open_new_tab":17,"is_heading":17,"margin_top":17},70,"Whatagraph MCP","/mcp",{"id":52,"title":53,"url":54,"open_new_tab":17,"is_heading":17,"margin_top":17},66,"Whatagraph IQ","/whatagraph-iq",{"id":56,"title":57,"url":58,"open_new_tab":17,"is_heading":17,"margin_top":17},6,"Move data to BigQuery","/data-transfer/google-bigquery",{"id":60,"title":61,"url":62,"open_new_tab":17,"is_heading":17,"margin_top":17},62,"Visualize data in Looker Studio","/data-transfer/looker-studio",{"id":64,"title":65,"url":37,"open_new_tab":17,"is_heading":38,"margin_top":38},7,"Solutions",{"id":14,"title":67,"url":68,"open_new_tab":17,"is_heading":17,"margin_top":17},"Agencies","/agencies",{"id":19,"title":70,"url":71,"open_new_tab":17,"is_heading":17,"margin_top":17},"eCommerce","/e-commerce",{"id":73,"title":74,"url":75,"open_new_tab":17,"is_heading":17,"margin_top":17},67,"Multi-location operators","/global_businesses",[77,79,83,87,91,95,99,102,106,110],{"id":27,"title":78,"url":37,"open_new_tab":17,"is_heading":38,"margin_top":17},"Resources",{"id":80,"title":81,"url":82,"open_new_tab":17,"is_heading":17,"margin_top":17},12,"Blog","/blog",{"id":84,"title":85,"url":86,"open_new_tab":17,"is_heading":17,"margin_top":17},14,"Customer stories","/case-studies",{"id":88,"title":89,"url":90,"open_new_tab":17,"is_heading":17,"margin_top":17},13,"Webinars","/webinars",{"id":92,"title":93,"url":94,"open_new_tab":17,"is_heading":17,"margin_top":17},15,"Marketing report templates","/templates",{"id":96,"title":97,"url":98,"open_new_tab":17,"is_heading":17,"margin_top":17},16,"Dashboard examples","/dashboard-examples",{"id":100,"title":101,"url":37,"open_new_tab":17,"is_heading":17,"margin_top":17},43,"Comparisons",{"id":103,"title":104,"url":105,"open_new_tab":17,"is_heading":17,"margin_top":17},44,"Reviews","/reviews",{"id":107,"title":108,"url":109,"open_new_tab":38,"is_heading":17,"margin_top":17},63,"Changelog","https://wg.canny.io/changelog",{"id":111,"title":112,"url":113,"open_new_tab":17,"is_heading":17,"margin_top":17},60,"Pricing","/pricing",[115,118,122,126,130,134,138,142,146,150,154],{"id":116,"title":117,"url":37,"open_new_tab":17,"is_heading":38,"margin_top":17},17,"Integrations",{"id":119,"title":120,"url":121,"open_new_tab":17,"is_heading":17,"margin_top":17},19,"Adform","/integrations/adform",{"id":123,"title":124,"url":125,"open_new_tab":17,"is_heading":17,"margin_top":17},18,"Facebook Ads","/integrations/facebook-ads",{"id":127,"title":128,"url":129,"open_new_tab":17,"is_heading":17,"margin_top":17},20,"Google My Business","/integrations/google-my-business",{"id":131,"title":132,"url":133,"open_new_tab":17,"is_heading":17,"margin_top":17},21,"Google Sheets","/integrations/google-sheets",{"id":135,"title":136,"url":137,"open_new_tab":17,"is_heading":17,"margin_top":17},23,"Instagram","/integrations/instagram",{"id":139,"title":140,"url":141,"open_new_tab":17,"is_heading":17,"margin_top":17},22,"Klaviyo","/integrations/klaviyo",{"id":143,"title":144,"url":145,"open_new_tab":17,"is_heading":17,"margin_top":17},24,"LinkedIn","/integrations/linkedin",{"id":147,"title":148,"url":149,"open_new_tab":17,"is_heading":17,"margin_top":17},25,"LinkedIn Ads","/integrations/linkedin-ads",{"id":151,"title":152,"url":153,"open_new_tab":17,"is_heading":17,"margin_top":17},53,"StackAdapt","/integrations/stackadapt",{"id":155,"title":156,"url":157,"open_new_tab":17,"is_heading":17,"margin_top":17},27,"50+ More Integrations","/integrations",[159,162,166,170,173,177,181,185,189,193,197],{"id":160,"title":161,"url":37,"open_new_tab":17,"is_heading":38,"margin_top":17},28,"Reports & dashboards",{"id":163,"title":164,"url":165,"open_new_tab":17,"is_heading":17,"margin_top":17},29,"Marketing reporting software","/marketing-reporting-software",{"id":167,"title":168,"url":169,"open_new_tab":17,"is_heading":17,"margin_top":17},55,"Facebook Ads reporting tool","/facebook-ads-reporting-tool",{"id":31,"title":171,"url":172,"open_new_tab":17,"is_heading":17,"margin_top":17},"Google Ads reporting tool","/google-ads-reporting-tool",{"id":174,"title":175,"url":176,"open_new_tab":17,"is_heading":17,"margin_top":17},54,"Google My Business reporting tool","/google-my-business-reporting-tool",{"id":178,"title":179,"url":180,"open_new_tab":17,"is_heading":17,"margin_top":17},34,"Instagram reporting tool","/instagram-reporting-tool",{"id":182,"title":183,"url":184,"open_new_tab":17,"is_heading":17,"margin_top":17},56,"Social media reporting tool","/social-media-report-tool",{"id":186,"title":187,"url":188,"open_new_tab":17,"is_heading":17,"margin_top":17},38,"SEO reporting tool","/seo-reporting-tool",{"id":190,"title":191,"url":192,"open_new_tab":17,"is_heading":17,"margin_top":17},57,"TikTok Ads dashboard","/tiktok-ads-dashboard",{"id":194,"title":195,"url":196,"open_new_tab":17,"is_heading":17,"margin_top":17},39,"White-label dashboard software","/white-label-dashboard",{"id":198,"title":199,"url":200,"open_new_tab":17,"is_heading":17,"margin_top":17},40,"All marketing report examples","/reporting-examples",[202,205,208,212,216,220,224,228,232,236],{"id":203,"title":204,"url":37,"open_new_tab":17,"is_heading":38,"margin_top":17},41,"Company ",{"id":206,"title":207,"url":37,"open_new_tab":17,"is_heading":17,"margin_top":17},42,"Whatagraph B.V.",{"id":209,"title":210,"url":211,"open_new_tab":38,"is_heading":17,"margin_top":17},45,"+1 917 905 4361","tel:+19179054361",{"id":213,"title":214,"url":215,"open_new_tab":38,"is_heading":17,"margin_top":17},59,"+31 30 203 0159","tel:+31302030159",{"id":217,"title":218,"url":219,"open_new_tab":38,"is_heading":17,"margin_top":17},46,"hi@whatagraph.com","mailto:hi@whatagraph.com",{"id":221,"title":222,"url":223,"open_new_tab":17,"is_heading":17,"margin_top":38},47,"About us","/about",{"id":225,"title":226,"url":227,"open_new_tab":17,"is_heading":17,"margin_top":17},48,"Career","/career",{"id":229,"title":230,"url":231,"open_new_tab":38,"is_heading":17,"margin_top":17},65,"Help center","https://help.whatagraph.com/",{"id":233,"title":234,"url":235,"open_new_tab":17,"is_heading":17,"margin_top":17},68,"Ambassador program","/ambassador-program",{"id":237,"title":238,"url":239,"open_new_tab":17,"is_heading":17,"margin_top":17},50,"Report misconduct","https://forms.gle/t7XC9CWM2jwenS769",[241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,286],{"id":80,"title":242,"url":243,"open_new_tab":17},"Looker Studio alternative","/alternatives/google-data-studio",{"id":88,"title":245,"url":246,"open_new_tab":17},"Supermetrics alternative","/alternatives/supermetrics",{"id":84,"title":248,"url":249,"open_new_tab":17},"Databox alternative","/alternatives/databox",{"id":92,"title":251,"url":252,"open_new_tab":17},"DashThis alternative","/alternatives/dashthis",{"id":96,"title":254,"url":255,"open_new_tab":17},"Klipfolio alternative","/alternatives/klipfolio",{"id":116,"title":257,"url":258,"open_new_tab":17},"AgencyAnalytics alternative","/alternatives/agency-analytics",{"id":123,"title":260,"url":261,"open_new_tab":17},"Funnel.io alternative","/alternatives/funnel-io",{"id":119,"title":263,"url":264,"open_new_tab":17},"NinjaCat alternative","/alternatives/ninjacat",{"id":127,"title":266,"url":267,"open_new_tab":17},"TapClicks alternative","/alternatives/tapclicks",{"id":131,"title":269,"url":270,"open_new_tab":17},"ReportGarden alternative","/alternatives/reportgarden",{"id":139,"title":272,"url":273,"open_new_tab":17},"Swydo alternative","/alternatives/swydo",{"id":135,"title":275,"url":276,"open_new_tab":17},"Cyfe alternative","/alternatives/cyfe",{"id":143,"title":278,"url":279,"open_new_tab":17},"Adverity alternative","/alternatives/adverity",{"id":147,"title":281,"url":282,"open_new_tab":17},"Datorama alternative","/alternatives/datorama",{"id":155,"title":284,"url":285,"open_new_tab":17},"Best marketing analytics tools and software","/blog/articles/best-marketing-analytics-tools",{"id":160,"title":287,"url":288,"open_new_tab":17},"Best social media analytics tools","/blog/articles/best-social-media-analytics-tools",[290,293,295,297,299,301,303,305],{"id":291,"page_slug":292},5,"/facebook-ads-reporting-tool-1",{"id":56,"page_slug":294},"/marketing-reporting-software-1",{"id":64,"page_slug":296},"/alternative-databox",{"id":23,"page_slug":298},"/alternative-dashthis",{"id":27,"page_slug":300},"/alternative-supermetrics",{"id":80,"page_slug":302},"/alternative-agency-analytics",{"id":88,"page_slug":304},"/facebook-ads-reporting-platform",{"id":84,"page_slug":306},"/marketing-agency-reporting-platform",{},{"data":309,"meta":553},{"id":5,"createdAt":310,"updatedAt":311,"documentId":312,"publishedAt":313,"cta":314,"hide_main_menu":323,"hide_navbar_completely":326,"custom_cta_on_right":333,"element":357},"2023-05-19T14:58:27.023Z","2026-08-13T14:44:05.054Z","exvdotd5b6517ieljdohdwvd","2026-08-13T14:44:04.086Z",[315,319],{"id":88,"label":316,"url":317,"open_new_tab":38,"button_type":318},"Log in","https://live.whatagraph.com/auth/login","link",{"id":84,"label":320,"url":321,"open_new_tab":17,"button_type":322},"Get a demo","/book-a-call","primary",[324],{"id":92,"page_slug":325},"/marketing-intelligence-platform-lp",[327,330],{"id":328,"page_slug":329},3,"/referral-signup",{"id":331,"page_slug":332},4,"affiliate-signup",[334,339,342,345,348,351,354],{"id":19,"page_slug":325,"cta":335},[336],{"id":92,"label":337,"url":338,"open_new_tab":38,"button_type":322},"Start free trial","https://live.whatagraph.com/auth/register",{"id":23,"page_slug":296,"cta":340},[341],{"id":96,"label":337,"url":338,"open_new_tab":38,"button_type":322},{"id":27,"page_slug":298,"cta":343},[344],{"id":116,"label":337,"url":338,"open_new_tab":38,"button_type":322},{"id":80,"page_slug":300,"cta":346},[347],{"id":123,"label":337,"url":338,"open_new_tab":38,"button_type":322},{"id":88,"page_slug":302,"cta":349},[350],{"id":119,"label":337,"url":338,"open_new_tab":38,"button_type":322},{"id":84,"page_slug":304,"cta":352},[353],{"id":127,"label":337,"url":338,"open_new_tab":38,"button_type":322},{"id":92,"page_slug":306,"cta":355},[356],{"id":131,"label":337,"url":338,"open_new_tab":38,"button_type":322},[358,429,431,465,467],{"id":5,"title":36,"columns":359,"highlight_title":37,"highlight_image":37,"highlight_links":360,"link":361,"__component":428},"columns - 2",[],[362,377,394,404,418],{"id":5,"title":41,"url":42,"open_new_tab":17,"column":363,"subtitle":364,"svg":365},"column 1","Your single source of truth for marketing data",{"id":366,"name":367,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":368,"ext":369,"mime":370,"size":371,"url":372,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":374,"updatedAt":374,"documentId":375,"publishedAt":376,"focalPoint":37},16232,"allfeatures.svg","allfeatures_ee21be4216",".svg","image/svg+xml",1.01,"https://s3.us-east-2.amazonaws.com/whatagraph.com/allfeatures_ee21be4216.svg","aws-s3","2026-01-14T13:40:51.326Z","f6fdcdbv4ul9g0vif8y6sefm","2026-06-25T09:17:20.490Z",{"id":378,"title":379,"url":46,"open_new_tab":17,"column":363,"subtitle":380,"svg":381},31,"Whatagraph Data Hub","Store, clean & transform your marketing data",{"id":382,"name":383,"alternativeText":384,"caption":37,"width":385,"height":385,"formats":37,"hash":386,"ext":387,"mime":388,"size":389,"url":390,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":391,"updatedAt":392,"documentId":393,"publishedAt":376,"focalPoint":37},16868,"Data-Hub.png","Data Hub - Four rounded square shapes arranged in a square formation.",64,"Data_Hub_b72705c6d1",".png","image/png",0.79,"https://s3.us-east-2.amazonaws.com/whatagraph.com/Data_Hub_b72705c6d1.png","2026-04-07T12:04:40.644Z","2026-04-07T12:04:41.899Z","jwkbk1ww3s8gewcuofstlbvl",{"id":31,"title":49,"url":50,"open_new_tab":17,"column":363,"subtitle":395,"svg":396},"Connect Whatagraph to your AI tools",{"id":397,"name":398,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":399,"ext":369,"mime":370,"size":400,"url":401,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":402,"updatedAt":402,"documentId":403,"publishedAt":376,"focalPoint":37},17210,"MCP_nav.svg","MCP_nav_dfe02a5d36",0.82,"https://s3.us-east-2.amazonaws.com/whatagraph.com/MCP_nav_dfe02a5d36.svg","2026-06-02T07:28:06.198Z","zn80nttt9w2kmyyh2fc1hn8e",{"id":405,"title":406,"url":407,"open_new_tab":17,"column":408,"subtitle":409,"svg":410},33,"IQ Agents ","/agents-waitlist","column 2","Early access open ",{"id":411,"name":412,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":413,"ext":369,"mime":370,"size":414,"url":415,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":416,"updatedAt":416,"documentId":417,"publishedAt":376,"focalPoint":37},16234,"aiplaybook.svg","aiplaybook_903e4c233a",1.64,"https://s3.us-east-2.amazonaws.com/whatagraph.com/aiplaybook_903e4c233a.svg","2026-01-14T13:40:51.329Z","x3a9zc1fbj1qx5nl4yuwkr5d",{"id":143,"title":53,"url":54,"open_new_tab":17,"column":408,"subtitle":419,"svg":420},"Marketing intelligence, redefined",{"id":421,"name":422,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":423,"ext":369,"mime":370,"size":424,"url":425,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":426,"updatedAt":426,"documentId":427,"publishedAt":376,"focalPoint":37},16231,"IQ Mark - White.svg","IQ_Mark_White_8b09cc84e0",1.06,"https://s3.us-east-2.amazonaws.com/whatagraph.com/IQ_Mark_White_8b09cc84e0.svg","2026-01-14T13:40:51.318Z","ncj45hto7khkk0pchgmpppwc","navigation.nav-dropdown",{"id":5,"title":117,"url":157,"open_new_tab":17,"__component":430},"navigation.nav-link",{"id":331,"title":65,"columns":37,"highlight_title":37,"highlight_image":37,"highlight_links":432,"link":433,"__component":428},[],[434,444,455],{"id":155,"title":67,"url":68,"open_new_tab":17,"column":363,"subtitle":435,"svg":436},"Client-ready reporting, faster",{"id":437,"name":438,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":439,"ext":369,"mime":370,"size":440,"url":441,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":442,"updatedAt":442,"documentId":443,"publishedAt":376,"focalPoint":37},16236,"agencies.svg","agencies_4826492e15",2.04,"https://s3.us-east-2.amazonaws.com/whatagraph.com/agencies_4826492e15.svg","2026-01-14T13:40:51.387Z","ze7oydn8vut6hx6vhja9ky73",{"id":160,"title":445,"url":71,"open_new_tab":17,"column":363,"subtitle":446,"svg":447},"Ecommerce","Track ROI across every channel",{"id":448,"name":449,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":450,"ext":369,"mime":370,"size":451,"url":452,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":453,"updatedAt":453,"documentId":454,"publishedAt":376,"focalPoint":37},16239,"e-commerce.svg","e_commerce_d99d7057c0",0.86,"https://s3.us-east-2.amazonaws.com/whatagraph.com/e_commerce_d99d7057c0.svg","2026-01-14T13:40:51.404Z","waui9mgiqsydt9momosxxbtp",{"id":163,"title":74,"url":75,"open_new_tab":17,"column":363,"subtitle":456,"svg":457},"Reliable reporting for global teams",{"id":458,"name":459,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":460,"ext":369,"mime":370,"size":461,"url":462,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":463,"updatedAt":463,"documentId":464,"publishedAt":376,"focalPoint":37},16233,"globalbiz.svg","globalbiz_71205a5d56",1.96,"https://s3.us-east-2.amazonaws.com/whatagraph.com/globalbiz_71205a5d56.svg","2026-01-14T13:40:51.328Z","ouc4n705rfnp11bj3ao4dfkl",{"id":466,"title":112,"url":113,"open_new_tab":17,"__component":430},30,{"id":328,"title":78,"columns":359,"highlight_title":37,"highlight_image":37,"highlight_links":468,"link":469,"__component":428},[],[470,481,486,498,508,519,531,543],{"id":471,"title":472,"url":86,"open_new_tab":17,"column":363,"subtitle":473,"svg":474},26,"Case studies","Discover real customer results",{"id":475,"name":476,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":477,"ext":369,"mime":370,"size":400,"url":478,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":479,"updatedAt":479,"documentId":480,"publishedAt":376,"focalPoint":37},16235,"case studies.svg","case_studies_49b6435e10","https://s3.us-east-2.amazonaws.com/whatagraph.com/case_studies_49b6435e10.svg","2026-01-14T13:40:51.382Z","pu89p5bm8wit011veromi3ai",{"id":131,"title":482,"url":483,"open_new_tab":17,"column":408,"subtitle":484,"svg":485},"Whatagraph alternatives","https://whatagraph.com/alternatives","Compare Whatagraph with other alternatives ",{"id":411,"name":412,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":413,"ext":369,"mime":370,"size":414,"url":415,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":416,"updatedAt":416,"documentId":417,"publishedAt":376,"focalPoint":37},{"id":19,"title":230,"url":487,"open_new_tab":38,"column":363,"subtitle":488,"svg":489},"https://help.whatagraph.com/en/","Find the exact answers you need",{"id":490,"name":491,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":492,"ext":369,"mime":370,"size":493,"url":494,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":495,"updatedAt":496,"documentId":497,"publishedAt":376,"focalPoint":37},16241,"helpcenter.svg","helpcenter_ef45a75270",1.28,"https://s3.us-east-2.amazonaws.com/whatagraph.com/helpcenter_ef45a75270.svg","2026-01-14T13:40:51.423Z","2026-01-14T13:42:48.423Z","b2cway5jatndbs599ssbct3p",{"id":23,"title":81,"url":82,"open_new_tab":17,"column":363,"subtitle":499,"svg":500},"Read practical guides and tool reviews",{"id":501,"name":502,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":503,"ext":369,"mime":370,"size":504,"url":505,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":506,"updatedAt":506,"documentId":507,"publishedAt":376,"focalPoint":37},16240,"blog.svg","blog_052552b2f3",0.94,"https://s3.us-east-2.amazonaws.com/whatagraph.com/blog_052552b2f3.svg","2026-01-14T13:40:51.407Z","y43c25bmc73t2mzp5is4nrw5",{"id":88,"title":509,"url":94,"open_new_tab":17,"column":363,"subtitle":510,"svg":511},"Templates","Use ready-made templates for free",{"id":512,"name":513,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":514,"ext":369,"mime":370,"size":515,"url":516,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":517,"updatedAt":517,"documentId":518,"publishedAt":376,"focalPoint":37},16243,"temlpates.svg","temlpates_7fa338d0e0",0.67,"https://s3.us-east-2.amazonaws.com/whatagraph.com/temlpates_7fa338d0e0.svg","2026-01-14T13:40:51.433Z","ap3pilfe8txz0h8sal6g1wzp",{"id":139,"title":520,"url":521,"open_new_tab":38,"column":408,"subtitle":522,"svg":523},"AI readiness quiz","https://whatagraph.com/ai-readiness-quiz","Check if your marketing data is ready for AI",{"id":524,"name":525,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":526,"ext":369,"mime":370,"size":527,"url":528,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":529,"updatedAt":529,"documentId":530,"publishedAt":376,"focalPoint":37},16237,"freemarketingtools.svg","freemarketingtools_1ce4af9bd9",1.55,"https://s3.us-east-2.amazonaws.com/whatagraph.com/freemarketingtools_1ce4af9bd9.svg","2026-01-14T13:40:51.389Z","n9c92bnac0q2d575sseh6igw",{"id":466,"title":532,"url":533,"open_new_tab":17,"column":408,"subtitle":534,"svg":535},"PPC reporting hub","https://whatagraph.com/templates/ppc-report","Get templates co-created with real marketers",{"id":536,"name":537,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":538,"ext":369,"mime":370,"size":539,"url":540,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":541,"updatedAt":541,"documentId":542,"publishedAt":376,"focalPoint":37},16242,"reportingcheet.svg","reportingcheet_e295249c75",0.69,"https://s3.us-east-2.amazonaws.com/whatagraph.com/reportingcheet_e295249c75.svg","2026-01-14T13:40:51.426Z","erqy74ya10m5qhuu0pn6n44r",{"id":27,"title":89,"url":90,"open_new_tab":17,"column":408,"subtitle":544,"svg":545},"Hear from industry leaders",{"id":546,"name":547,"alternativeText":37,"caption":37,"width":31,"height":31,"formats":37,"hash":548,"ext":369,"mime":370,"size":549,"url":550,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":551,"updatedAt":551,"documentId":552,"publishedAt":376,"focalPoint":37},16238,"webinars.svg","webinars_b295fc2850",0.68,"https://s3.us-east-2.amazonaws.com/whatagraph.com/webinars_b295fc2850.svg","2026-01-14T13:40:51.403Z","risc1zt1hxx1o5hg2thlmsy8",{},{"data":555,"meta":590},[556],{"id":557,"title":32,"slug":558,"intercom":38,"testimonials":17,"reporting":17,"help":17,"createdAt":559,"updatedAt":560,"publishedAt":561,"documentId":562,"content":563,"seo":568},621,"data-processing-agreement","2026-08-18T06:50:47.579Z","2026-08-18T08:08:27.995Z","2026-08-18T08:08:28.189Z","elkeapiaclur8gcuc0mk140w",[564],{"id":565,"content":566,"__component":567},315,"\u003Ch1>Data Processing Agreement\u003C/h1>\u003Ch3 id=\"effective-as-of-17-august-2026\">Effective as of 17, August 2026\u003C/h3>\u003Ch3 id=\"-\"> \u003C/h3>\u003Ch3 id=\"purpose-and-scope\">\u003Cstrong>1. Purpose and Scope\u003C/strong>\u003C/h3>\u003Cp>1.1. \"DPA\" means this Data Processing Agreement, which forms part of and supplements the Agreement.\u003C/p>\u003Cp>1.2. This DPA applies to the extent that Whatagraph processes Personal Data on behalf of Customer in connection with the provision of the Service under the Agreement.\u003C/p>\u003Cp>1.3. The purpose of this DPA is to set out the terms governing Whatagraph's processing of Personal Data on behalf of Customer and to ensure that such processing is carried out in compliance with applicable Data Protection Laws, including Article 28 of the GDPR.\u003C/p>\u003Cp>1.4. In the event of any conflict or inconsistency between this DPA and the Agreement with respect to the processing of Personal Data, the provisions of this DPA shall prevail to the extent of such conflict or inconsistency.\u003C/p>\u003Ch3 id=\"definitions\">\u003Cstrong>2. Definitions\u003C/strong>\u003C/h3>\u003Cp>2.1. In this DPA, the following terms shall have the meanings set out below. Capitalised terms used but not defined herein shall have the meanings given to them in the Agreement or, where applicable, in Article 4 of the GDPR.\u003C/p>\u003Cp>2.2. \"Agreement\" means the agreement between Whatagraph and Customer governing Customer's access to and use of the Service, including the Whatagraph Terms and Conditions (available \u003Ca href=\"/terms-and-conditions\">at Terms & Conditions\u003C/a>, as updated from time to time) and any other documents, schedules, or annexes forming part thereof.\u003C/p>\u003Cp>2.3. \"Customer\" means the legal entity or natural person entering into the Agreement with Whatagraph.\u003C/p>\u003Cp>2.4. \"Data Protection Laws\" means the GDPR, together with any laws, regulations, and binding decisions of competent supervisory authorities supplementing, implementing, or made pursuant to the GDPR, and any other legislation applicable to the processing of Personal Data under this DPA.\u003C/p>\u003Cp>2.5. \"Parties\" means Customer and Whatagraph collectively.\u003C/p>\u003Cp>2.6. \"Service\" means the marketing analytics platform and related services provided by Whatagraph to the Customer pursuant to the Agreement.\u003C/p>\u003Cp>2.7. \"Supervisory Authority\" means an authority pursuant to Article 51 of the GDPR, responsible for monitoring the application of Data Protection Laws.\u003C/p>\u003Cp>2.8. \"Whatagraph\" means Whatagraph B.V., a company incorporated under the laws of the Netherlands, registered with the Dutch Chamber of Commerce (KVK) under number 67082068, with its registered office at Herengracht 420, 1017 BZ Amsterdam, the Netherlands.\u003C/p>\u003Ch3 id=\"roles-and-processing-instructions\">\u003Cstrong>3. Roles and Processing Instructions\u003C/strong>\u003C/h3>\u003Cp>3.1. The Parties acknowledge and agree that, for the purposes of this DPA and within the meaning of the GDPR, Customer acts as the controller and Whatagraph acts as the processor.\u003C/p>\u003Cp>3.2. Customer, as controller, is responsible for: (a) ensuring that Personal Data is processed in compliance with the GDPR and other applicable Data Protection Laws; (b) determining the purposes and means of processing; and (c) ensuring that the processing entrusted to Whatagraph has a valid legal basis under applicable Data Protection Laws.\u003C/p>\u003Cp>3.3. Whatagraph shall process Personal Data only in accordance with the documented instructions of Customer, except where processing is required by European Union or Member State law applicable to Whatagraph, in which case Whatagraph shall inform Customer of that legal requirement before processing, unless such law prohibits such notification on grounds of substantial public interest. Customer's instructions as at the date of this DPA are set out in Annex I. Customer may issue further documented instructions during the term of this DPA; provided, however, that all such instructions shall be consistent with the rights and obligations of the Parties under this DPA and shall be recorded in writing.\u003C/p>\u003Cp>3.4. If Customer issues instructions that Whatagraph reasonably considers to be in breach of applicable Data Protection Laws, Whatagraph shall be entitled to suspend processing pursuant to such instructions pending written confirmation or amendment from Customer. Customer shall indemnify and hold Whatagraph harmless from and against any claims, penalties, losses, or damages arising directly from Whatagraph acting in good faith upon Customer's documented instructions.\u003C/p>\u003Cp>3.5. Customer is responsible for ensuring that its instructions to Whatagraph comply with applicable Data Protection Laws and that Customer has obtained a valid legal basis for the processing of Personal Data contemplated under the Agreement. .\u003C/p>\u003Ch3 id=\"confidentiality\">\u003Cstrong>4. Confidentiality\u003C/strong>\u003C/h3>\u003Cp>4.1. Whatagraph shall ensure that all persons authorised to process Personal Data on its behalf are subject to an appropriate obligation of confidentiality, whether contractual or statutory.\u003C/p>\u003Cp>4.2. Whatagraph shall ensure that access to Personal Data is limited to those personnel who require such access for the purpose of providing, maintaining or supporting the services under the Agreement.\u003C/p>\u003Ch3 id=\"data-subject-rights\">\u003Cstrong>5. Data Subject Rights\u003C/strong>\u003C/h3>\u003Cp>5.1. Whatagraph shall, taking into account the nature of the processing and the information available to it, assist Customer by appropriate technical and organisational measures in fulfilling Customer's obligation to respond to requests from data subjects exercising their rights under the GDPR.\u003C/p>\u003Cp>5.2. If a data subject submits a request directly to Whatagraph to exercise any of its rights under Chapter III of the GDPR, Whatagraph shall, without undue delay, forward such request to Customer, unless otherwise agreed between the Parties or required by applicable law.\u003C/p>\u003Cp>5.3. If Whatagraph receives any correspondence, enquiry, or complaint from a Supervisory Authority relating to the processing of Personal Data under this DPA, Whatagraph shall, without undue delay, inform Customer and cooperate with Customer in preparing an appropriate response, unless such notification is prohibited under applicable law.\u003C/p>\u003Cp>5.4. Upon Customer's reasonable request, Whatagraph shall provide Customer with reasonable assistance in carrying out data protection impact assessments and, where required, in any prior consultation with the relevant Supervisory Authority. The scope, terms, and any associated costs of such assistance shall be agreed between the Parties in writing in advance.\u003C/p>\u003Ch3 id=\"data-security\">\u003Cstrong>6. Data Security\u003C/strong>\u003C/h3>\u003Cp>6.1. Whatagraph shall implement and maintain appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to Personal Data.\u003C/p>\u003Cp>6.2. Details of Whatagraph’s technical and organisational security measures are set out in Annex II to this DPA and may be further described in Whatagraph’s Security Policy, available at \u003Ca href=\"/security-policy\">https://whatagraph.com/security-policy\u003C/a>. Whatagraph may update such measures from time to time, provided that any such update does not materially diminish the overall level of protection afforded to Personal Data.\u003C/p>\u003Cp>6.3. Whatagraph shall notify Customer of any Personal Data Breach involving Personal Data processed under this DPA without undue delay and, in any event, no later than forty eight (48) hours after becoming aware of such breach. Such notification shall include, to the extent reasonably available at the time of notification:\u003C/p>\u003Cp>- a description of the nature of the Personal Data Breach;\u003C/p>\u003Cp>- the name and contact details of Whatagraph's data protection contact point;\u003C/p>\u003Cp>- a description of the likely consequences of the Personal Data Breach; and\u003C/p>\u003Cp>- a description of the measures taken or proposed to be taken to address the Personal Data Breach, including measures to mitigate its possible adverse effects.\u003C/p>\u003Cp>6.4. If a Personal Data Breach is attributable to Whatagraph's processing of Personal Data, Whatagraph shall cooperate with Customer and provide reasonable assistance and information to enable Customer to fulfil its obligations under the GDPR, including notifying the relevant Supervisory Authority and, where required, affected Data Subjects.\u003C/p>\u003Cp>6.5. Each Party shall bear its respective costs associated with managing a Personal Data Breach and fulfilling its obligations under this DPA and applicable Data Protection Laws.\u003C/p>\u003Ch3 id=\"sub-processors\">7. Sub-processors\u003C/h3>\u003Cp>7.1. Customer hereby provides Whatagraph with a general written authorisation to engage sub-processors in connection with the provision of the services and the processing of Personal Data under this DPA. A list of Whatagraph’s authorised sub-processors is set out in Annex I to this DPA.\u003C/p>\u003Cp>7.2. Whatagraph shall notify Customer of any intended changes to the list of sub-processors, including the addition or replacement of any sub-processor, by providing written notice to Customer no later than thirty (30) days prior to the intended change taking effect.\u003C/p>\u003Cp>7.3. Customer may object to any such intended change by notifying Whatagraph in writing within fourteen (14) days of receipt of the notification referred to in Clause 7.2. If Customer raises a reasonable objection and the Parties are unable to resolve the matter within thirty (30) days, either Party may terminate this DPA and the Agreement upon written notice to the other Party, without prejudice to any fees or charges already accrued prior to the effective date of such termination.\u003C/p>\u003Cp>7.4. Whatagraph shall impose on each sub-processor, by way of a written agreement, data protection obligations no less protective than those set out in this DPA, including, in particular, the requirement to implement appropriate technical and organisational measures such that the processing meets the requirements of the GDPR.\u003C/p>\u003Cp>7.5. Whatagraph shall remain fully liable to Customer for the performance of each sub-processor's data protection obligations to the extent that such sub-processor fails to fulfil those obligations. Nothing in this Clause shall affect the respective responsibilities of Customer or Whatagraph under the GDPR.\u003C/p>\u003Ch3 id=\"international-data-transfers\">8. International Data Transfers\u003C/h3>\u003Cp>8.1. Customer hereby authorises Whatagraph to transfer and process Personal Data outside the European Economic Area (\"EEA\"), provided that any such transfer is carried out in accordance with one of the lawful transfer mechanisms set out in the GDPR and in accordance with Customer's documented instructions as set out in Annex I.\u003C/p>\u003Cp>8.2. Where required under applicable Data Protection Laws, Whatagraph shall implement appropriate safeguards for such transfers, including the European Commission’s standard contractual clauses or any other lawful transfer mechanism recognised under Chapter V of the GDPR.\u003C/p>\u003Cp>8.3. Information regarding relevant international transfers and applicable transfer mechanisms is set out in Annex I to this DPA.\u003C/p>\u003Ch3 id=\"audit\">9. Audit\u003C/h3>\u003Cp>9.1. Whatagraph shall make available to Customer, upon reasonable request, information necessary to demonstrate compliance with its obligations under this DPA and applicable Data Protection Laws.\u003C/p>\u003Cp>9.2. To the extent available, such information may be provided through security documentation, audit reports, certifications, or other compliance materials made available by Whatagraph.\u003C/p>\u003Cp>9.3. If the information made available by Whatagraph is not reasonably sufficient for Customer to verify compliance with this DPA, Customer may, no more than once per calendar year and upon at least thirty (30) days’ prior written notice, request an audit of Whatagraph’s relevant processing activities, provided that such audit:\u003C/p>\u003Cp>- is limited in scope to matters relevant to this DPA;\u003C/p>\u003Cp>- is conducted during normal business hours;\u003C/p>\u003Cp>- does not unreasonably interfere with Whatagraph’s business operations; and\u003C/p>\u003Cp>- is subject to appropriate confidentiality obligations.\u003C/p>\u003Cp>9.4. Any such audit shall be conducted either by Customer or by an independent third-party auditor that is not a competitor of Whatagraph and is bound by appropriate confidentiality obligations.\u003C/p>\u003Cp>9.5. Customer shall bear its own costs in connection with any audit under this Section.\u003C/p>\u003Ch3 id=\"term-and-termination\">10. Term and Termination\u003C/h3>\u003Cp>1. This DPA shall remain in effect for as long as Whatagraph processes Personal Data on behalf of Customer under the Agreement.\u003C/p>\u003Cp>2. Upon termination or expiry of the Agreement, Whatagraph shall, at Customer’s election, return or securely delete all Personal Data processed on behalf of Customer, unless applicable law requires the continued retention of such Personal Data.\u003C/p>\u003Cp>3. If Customer does not request the return of Personal Data within ninety (90) days following termination or expiry of the Agreement, Whatagraph shall delete such Personal Data in accordance with its standard retention and deletion practices.\u003C/p>\u003Cp>4. Notwithstanding the foregoing, Whatagraph may retain Personal Data to the extent and for such period as required by applicable law, provided that such Personal Data shall remain subject to the protections set out in this DPA and applicable Data Protection Laws for so long as it is retained.\u003C/p>\u003Cp>5. Any provisions of this DPA that, by their nature, are intended to survive termination or expiry shall continue in full force and effect following the termination or expiry of this DPA.\u003C/p>\u003Cp> \u003C/p>\u003Ch3 id=\"annex-i-information-on-processing-of-personal-data\">\u003Cstrong>Annex I - Information on Processing of Personal Data\u003C/strong>\u003C/h3>\u003Cp> \u003C/p>\u003Ch3 id=\"details-of-processing\">1. Details of Processing\u003C/h3>\u003Cp> \u003C/p>\u003Cdiv style=\"margin-left:0pt;\" dir=\"ltr\" align=\"left\">\u003Cfigure class=\"table\">\u003Ctable class=\"ck-table-resized\" style=\"border-collapse:collapse;border-style:none;\">\u003Ccolgroup>\u003Ccol style=\"width:50%;\" width=\"189\">\u003Ccol style=\"width:50%;\" width=\"453\">\u003C/colgroup>\u003Ctbody>\u003Ctr style=\"height:41.6pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Subject matter of the processing\u003C/strong>\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">The provision of Whatagraph’s reporting, analytics, dashboarding, data integration and related support services under the Agreement.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:41.6pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Duration of the processing\u003C/strong>\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">For the duration of the Agreement and, thereafter, for any period during which Whatagraph retains Personal Data in accordance with the DPA, the Agreement, or applicable law.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:42.25pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Nature and purpose of the processing\u003C/strong>\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">The processing of Personal Data as necessary to provide the services to Customer, including collection, import, organisation, storage, structuring, visualisation, retrieval, export, support, maintenance, troubleshooting, and related service operations.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:35pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Categories of Personal Data\u003C/strong>\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Personal Data submitted to, stored on, or otherwise made available through the services by or on behalf of Customer, which may include account and contact details, user identifiers, campaign and performance data, CRM and lead data, customer-related data, device and usage data, and other Personal Data included in data sources connected by Customer.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:41.95pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Categories of data subjects\u003C/strong>\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Customer’s users, employees, contractors, clients, prospects, leads, website visitors, end users, and any other individuals whose Personal Data is included in the data made available by Customer through the services.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:48.9pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Special categories of Personal Data\u003C/strong>\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Customer shall not submit special categories of Personal Data to the services unless explicitly agreed otherwise in writing with Whatagraph.\u003C/p>\u003C/td>\u003C/tr>\u003C/tbody>\u003C/table>\u003C/figure>\u003C/div>\u003Cp> \u003C/p>\u003Ch3 id=\"sub-processors\">2. Sub-processors\u003C/h3>\u003Cp dir=\"ltr\">Whatagraph may engage sub-processors in connection with the provision of the services. A current list of authorised sub-processors is made available by Whatagraph and may be updated from time to time in accordance with this DPA.\u003C/p>\u003Cp> \u003C/p>\u003Cdiv style=\"margin-left:0pt;\" dir=\"ltr\" align=\"left\">\u003Cfigure class=\"table\">\u003Ctable class=\"ck-table-resized\" style=\"border-collapse:collapse;border-style:none;\">\u003Ccolgroup>\u003Ccol style=\"width:33.33%;\" width=\"189\">\u003Ccol style=\"width:33.33%;\" width=\"239\">\u003Ccol style=\"width:33.34%;\" width=\"214\">\u003C/colgroup>\u003Ctbody>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Sub-processor\u003C/strong>\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Purpose / Services Provided\u003C/strong>\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Location\u003C/strong>\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Google Cloud Platform (GCP)\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Core infrastructure, data storage, data processing, integrations and data pipeline services.\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: European Union. Limited processing may also occur in the United States.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Amazon Web Services (AWS)\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Limited infrastructure services, including hosting of certain frontend assets and transactional email delivery support.\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: European Union. Limited processing may also occur in the United States.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Salesforce\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Customer relationship management (CRM), marketing automation, and communications.\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: European Union. Limited processing may also occur in the United States.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Intercom\u003C/p>\u003C/td>\u003Ctd>\u003Cp dir=\"ltr\">Customer support and in-app messaging platform.\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: European Union. Limited processing may also occur in the United States.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Fathom\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Sales and customer services call recording and analysis.\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: United States.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Mixpanel\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Product analytics and usage tracking.\u003C/p>\u003Cp> \u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: European Union. Limited processing may also occur in the United States.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Claude (Anthropic)\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Customer service operations support and technical troubleshooting, including code analysis and debugging.\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: European Union. Limited processing may also occur in the United States.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Gemini API\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">AI functionalities if enabled by the customer.\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: European Union. Limited processing may also occur in the United States.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Datadog\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Analytics and monitoring. \u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: European Union. Limited processing may also occur in the United States.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Twillio\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Product analytics.\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Primary location: European Union. Limited processing may also occur in the United States.\u003C/p>\u003C/td>\u003C/tr>\u003C/tbody>\u003C/table>\u003C/figure>\u003C/div>\u003Cp> \u003C/p>\u003Ch3 id=\"international-transfer\">3. International Transfer\u003C/h3>\u003Cp dir=\"ltr\">To the extent Personal Data is transferred outside the European Economic Area, Whatagraph shall ensure that such transfer is subject to an appropriate transfer mechanism in accordance with applicable Data Protection Laws.\u003C/p>\u003Cp> \u003C/p>\u003Cdiv style=\"margin-left:0pt;\" dir=\"ltr\" align=\"left\">\u003Cfigure class=\"table\">\u003Ctable class=\"ck-table-resized\" style=\"border-collapse:collapse;border-style:none;\">\u003Ccolgroup>\u003Ccol style=\"width:33.33%;\" width=\"189\">\u003Ccol style=\"width:33.33%;\" width=\"214\">\u003Ccol style=\"width:33.34%;\" width=\"214\">\u003C/colgroup>\u003Cthead>\u003Ctr style=\"height:0pt;\">\u003Cth style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Recipient\u003C/strong>\u003C/p>\u003C/th>\u003Cth style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Country\u003C/strong>\u003C/p>\u003C/th>\u003Cth style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Transfer Mechanism\u003C/strong>\u003C/p>\u003C/th>\u003C/tr>\u003C/thead>\u003Ctbody>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Google Cloud Platform (GCP)\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">European Commission adequacy decision under the EU-U.S. Data Privacy Framework.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Amazon Web Services (AWS)\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">European Commission adequacy decision under the EU-U.S. Data Privacy Framework.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Salesforce \u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">European Commission adequacy decision under the EU-U.S. Data Privacy Framework.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Intercom\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">European Commission adequacy decision under the EU-U.S. Data Privacy Framework.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Fathom\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">European Commission adequacy decision under the EU-U.S. Data Privacy Framework.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Mixpanel\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">European Commission adequacy decision under the EU-U.S. Data Privacy Framework.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Claude (Anthropic)\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Standard contractual clauses adopted by the European Commission (SCCs) supplemented by a transfer impact assessment (TIA).\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Gemini API\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">European Commission adequacy decision under the EU-U.S. Data Privacy Framework.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Datadog\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">European Commission adequacy decision under the EU-U.S. Data Privacy Framework.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:0pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Twillio\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">United States\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">European Commission adequacy decision under the EU-U.S. Data Privacy Framework.\u003C/p>\u003C/td>\u003C/tr>\u003C/tbody>\u003C/table>\u003C/figure>\u003C/div>\u003Cp> \u003C/p>\u003Ch3 id=\"annex-ii-technical-and-organisational-measures\">Annex II - Technical and Organisational Measures\u003C/h3>\u003Cp dir=\"ltr\">Whatagraph implements and maintains appropriate technical and organisational measures designed to protect Personal Data, taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of processing, as well as the risks for the rights and freedoms of natural persons.\u003C/p>\u003Cp> \u003C/p>\u003Cp dir=\"ltr\">The measures implemented by Whatagraph include, as appropriate, the following:\u003C/p>\u003Cdiv style=\"margin-left:0pt;\" dir=\"ltr\" align=\"left\">\u003Cfigure class=\"table\">\u003Ctable class=\"ck-table-resized\" style=\"border-collapse:collapse;border-style:none;\">\u003Ccolgroup>\u003Ccol style=\"width:50%;\" width=\"238\">\u003Ccol style=\"width:50%;\" width=\"404\">\u003C/colgroup>\u003Cthead>\u003Ctr style=\"height:0pt;\">\u003Cth style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Control Area\u003C/strong>\u003C/p>\u003C/th>\u003Cth style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">\u003Cstrong>Description of Measures\u003C/strong>\u003C/p>\u003C/th>\u003C/tr>\u003C/thead>\u003Ctbody>\u003Ctr style=\"height:113.4pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Identity and Access Management\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph implements access controls designed to ensure that access to Personal Data is limited to authorised personnel on a need-to-know basis. Access is granted based on role and business need, and internal access is managed using role-based access principles. Multi-factor authentication is used for relevant systems, and access rights are reviewed and revoked where appropriate, including upon employee separation or role change.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:85.05pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Authentication and Account Security\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Unique user credentials are used for access to relevant systems and environments. Password and credential management practices are maintained to protect against unauthorised access, including procedures for password reset, credential revocation, and secure authentication controls.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:70.85pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Customer Access Controls\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph supports secure authentication and access controls for customer access to the Service. Customer accounts are logically separated, and customer users are granted access only within the relevant customer environment or workspace.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:90.7pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Infrastructure Security\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph maintains cloud-based infrastructure security measures designed to protect Personal Data and the Service environment. Such measures may include environment separation, firewalls, network access restrictions, secure configuration practices, and monitoring of infrastructure and service activity.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:85.05pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Data Access and Use Restrictions\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph applies measures designed to prevent unauthorised access to, use of, modification of, or disclosure of Personal Data. Access to Personal Data is restricted to authorised personnel whose job functions require such access in connection with the provision, maintenance or support of the Service.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:76.55pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Encryption and Secure Transmission\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph applies encryption and secure transmission measures, as appropriate, to protect Personal Data in transit and at rest. These measures may include encryption protocols, secure communication channels, and device-level protection controls.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:70.85pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Availability and Resilience\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph maintains measures designed to support the availability and resilience of the Service and related systems, including backup, recovery, monitoring, alerting, and other service continuity mechanisms, as appropriate.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:70.85pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Segregation of Data and Environments\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph applies logical separation measures designed to segregate Personal Data between customers and to separate production and non-production environments, where appropriate.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:56.45pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Vulnerability and Risk Management\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph maintains processes designed to identify, assess, prioritise and remediate security vulnerabilities and risks relevant to the Service and the processing of Personal Data.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:70.85pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Personnel Security and Awareness\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph requires personnel authorised to access Personal Data to be subject to confidentiality obligations and to receive appropriate security and privacy training. Personnel access is managed in accordance with internal security procedures.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:70.85pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Physical Security\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph relies on physical security measures implemented by its cloud infrastructure providers and any relevant facilities providers, designed to prevent unauthorised physical access to systems used to process Personal Data.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:70.85pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Third-Party Risk Management\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph maintains a process for selecting and managing vendors and sub-processors that may process Personal Data, including contractual safeguards and appropriate review of relevant security measures.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:70.85pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Incident Management\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph maintains procedures for detecting, responding to, and managing security incidents, including Personal Data Breaches, and for notifying Customer in accordance with this DPA where required.\u003C/p>\u003C/td>\u003C/tr>\u003Ctr style=\"height:70.85pt;\">\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Security Testing and Evaluation\u003C/p>\u003C/td>\u003Ctd style=\"border-color:#000000;border-width:0.5pt;overflow-wrap:break-word;overflow:hidden;padding:0pt 5.4pt;vertical-align:top;\">\u003Cp dir=\"ltr\">Whatagraph maintains processes for reviewing and evaluating the effectiveness of its technical and organisational measures, which may include internal reviews, security monitoring, vulnerability assessments, and other appropriate testing activities.\u003C/p>\u003C/td>\u003C/tr>\u003C/tbody>\u003C/table>\u003C/figure>\u003C/div>\u003Cp> \u003C/p>","sections.rich-text-content",{"id":569,"metaTitle":570,"metaDescription":571,"addNoIndex":37,"canonicalURL":37,"metaImage":572},3015,"Learn More about our Data Processing Agreement ","The Whatagraph Data Processing Agreement governs how personal data is handled.\n",{"id":573,"name":574,"alternativeText":37,"caption":37,"width":575,"height":576,"formats":577,"hash":585,"ext":387,"mime":388,"size":586,"url":587,"previewUrl":37,"provider":373,"provider_metadata":37,"createdAt":588,"updatedAt":588,"documentId":589,"publishedAt":376,"focalPoint":37},17248,"Whatagraph - Meta Image.png",2400,1256,{"thumbnail":578},{"ext":387,"url":579,"hash":580,"mime":388,"name":581,"path":37,"size":582,"width":583,"height":584},"https://s3.us-east-2.amazonaws.com/whatagraph.com/thumbnail_Whatagraph_Meta_Image_9e68d7aa1e.png","thumbnail_Whatagraph_Meta_Image_9e68d7aa1e","thumbnail_Whatagraph - Meta Image.png",41.11,245,128,"Whatagraph_Meta_Image_9e68d7aa1e",2681.52,"https://s3.us-east-2.amazonaws.com/whatagraph.com/Whatagraph_Meta_Image_9e68d7aa1e.png","2026-06-03T08:39:41.253Z","jlhxeaqh7h54rka3j03gano0",{"pagination":591},{"page":5,"pageSize":147,"pageCount":5,"total":5},1787040618295]