Data Processing Agreement
How SOClogix processes and protects client data in accordance with applicable regulations.
Last updated: January 1, 2026
Scope
This Data Processing Agreement (DPA) applies to all personal data processed by SOClogix on behalf of clients in the course of providing managed security services, including threat monitoring, incident response, and compliance management.
Data Processing Activities
SOClogix processes security telemetry, log data, endpoint data, network data, and related metadata for the purpose of threat detection, incident response, and security analytics. We process only the data necessary to deliver contracted security services.
Security Measures
SOClogix implements appropriate technical and organizational measures to protect client data, including encryption at rest and in transit, access controls, audit logging, regular security assessments, and SOC 2 Type II certified operations.
Data Retention & Deletion
Client data is retained in accordance with the terms of the service agreement. Upon termination of services, SOClogix will securely delete or return client data within 90 days, unless retention is required by law.
Sub-Processors
SOClogix may engage sub-processors for specific data processing activities. A current list of sub-processors is available upon request. Clients will be notified of changes to sub-processors with reasonable advance notice.
Contact
For DPA inquiries, contact our Data Protection team at [email protected] or (443) 409-5426.