The contract is already public: the DPA is published on this site, versioned and dated, and it is accepted by accepting the Terms of Service. What this page adds is the paper trail a procurement or privacy team keeps on file — a countersigned copy, the transfer annex, the security documentation.
The flow is deliberately boring. Read the public DPA. Write to dpo@bootdesk.eu with your organization's name and, if you have one, your workspace domain. We reply with the current pack, signed by the legal entity that operates the service.
Custom SLAs, on-premise deployments, or certification claims we cannot make. The deletion windows, the subprocessor list and the transfer mechanisms are already public — the pack documents them; it does not renegotiate them.What we do not send
The signer is GRUPO OITO OÜ — registry code 17195338, VAT EE102965920, Tartu mnt 67/1-13b, 10115 Tallinn, Estonia. Under the agreement, BootDesk is the processor and your organization is the controller. The DPA is governed by Estonian law, and the English version prevails over any translation.