{"preferenceLocale": "en-US", "requestedLocale": "en-US", "contentLocale": "en-US", "fallbackReason": "", "source": "accept-language"}
{"schemaVersion": "1.0.0", "pageId": "legal:dpa", "locale": "en-US", "contentLocale": "en-US", "status": "native", "fallbackReason": "", "canonicalPath": "/legal/dpa", "routePath": "/legal/dpa", "family": "legal_trust", "title": "Data Processing Addendum", "description": "", "editionDigest": "2b1cd9ae427f285e89b4b65b062cbdd3f34401fc97c9cc8923c108d59557a526", "revision": "2b1cd9ae427f285e89b4b65b062cbdd3f34401fc97c9cc8923c108d59557a526", "canonicalContentDigest": "a66ca197654d1e7ded92a7271fb0fcaee35559644ae247d44f04539d9e56bedf", "anchors": ["assistance", "current-status", "processing-scope", "security-measures"], "serverOwned": true, "metadata": {"title": "Data Processing Addendum", "description": "", "canonicalPath": "/legal/dpa", "htmlLang": "en"}, "payload": {"page": "dpa", "content": {"commitments": ["This page is a summary, not an executed Data Processing Addendum.", "XMemo can act as a processor for customer-provided memory data under an enterprise agreement.", "Customer administrators remain responsible for lawful instructions, retention settings and notices to their users.", "We help with export and deletion requests through audited procedures, and record completion without copying personal data."], "kicker": "Legal", "last_reviewed": "2026-09-29", "lead": "How XMemo processes data on behalf of business customers, the safeguards in place, and how to put a Data Processing Addendum in place.", "sections": [{"body": "This page is a public summary for customers evaluating XMemo. It is not an executed Data Processing Addendum and does not by itself create processor obligations.", "id": "current-status", "items": ["Free and Plus are described on [Pricing](/pricing). A Plus purchase does not execute a DPA or create a Business agreement.", "DPA, Business, seat, and order-form obligations apply only under a separate signed agreement, as stated in the Terms of Service.", "To put a DPA in place, contact privacy\u0040xmemo.dev."], "title": "Current status"}, {"body": "Processing covers hosted memory storage, recall and reflection, account and session management, team and organization administration, support diagnostics, and the technical service data needed to run and secure the service.", "id": "processing-scope", "items": ["Public discovery information and installer metadata never contain secrets.", "Writing memory requires a credential scoped to that memory, and XMemo checks the owner, team and organization of each request. Additional database-level row security depends on the deployment and must be confirmed for it.", "Administering the service requires an admin key, a console session, or a signed-in user with the right organization role."], "title": "Processing scope"}, {"body": "In production, XMemo requires HTTPS, secure cookies, protected token hashes, no plain-text key fallback, rate limits, private networking for its database and cache, and a production-readiness check before each release.", "id": "security-measures", "items": ["Production PostgreSQL must use certificate-validating TLS modes.", "MCP access should use revocable tokens stored in the database rather than fixed production tokens.", "Support bundles and data-request records exclude secrets and raw memory content."], "title": "Security measures"}, {"body": "We assist with export, deletion and incident response under documented procedures. Completion is recorded with request IDs, counts and timestamps, without copying personal data.", "id": "assistance", "items": [], "title": "Customer assistance"}], "source_note": "This summary does not replace a signed agreement. To request a DPA, contact privacy\u0040xmemo.dev.", "title": "Data Processing Addendum"}, "nav": [{"path": "/trust", "label": "Trust", "active": false}, {"path": "/legal/privacy", "label": "Privacy", "active": false}, {"path": "/legal/cookies", "label": "Cookies", "active": false}, {"path": "/legal/tos", "label": "Terms", "active": false}, {"path": "/legal/dpa", "label": "DPA", "active": true}, {"path": "/legal/subprocessors", "label": "Subprocessors", "active": false}, {"path": "/legal/tokusho", "label": "Commercial Disclosure", "active": false}, {"path": "/support", "label": "Support", "active": false}], "contentLocale": "en-US", "requestedLocale": "en-US", "fallbackReason": "", "decision": {"preferenceLocale": "en-US", "requestedLocale": "en-US", "contentLocale": "en-US", "fallbackReason": "", "source": "accept-language"}, "labels": {"product": "Home", "docs": "Docs", "mcp": "MCP", "skills": "Skills", "trust": "Trust", "login": "Log in / Sign up", "start": "Get started", "publicNavigation": "XMemo public navigation", "publicResources": "XMemo public resources", "brandHome": "XMemo home", "language": "Language", "loadingTrustContext": "Loading trust context", "trustContextUnavailable": "Trust context unavailable", "cachedTrustShell": "Showing the cached trust shell while the context API recovers.", "loadingLegalContext": "Loading legal context", "legalContextUnavailable": "Legal context unavailable", "cachedLegalTrustShell": "Showing the cached legal and trust shell while the context API recovers.", "startPilot": "Get started", "openProductNavigation": "Open public navigation", "pageMetadata": "Page metadata", "lastReviewed": "Last reviewed", "sourceBackedPublicSummary": "Source-backed public summary", "legalAndTrust": "Legal and trust", "commitments": "Commitments", "memoryOsLegalTrustCenter": "XMemo legal and trust center", "footerLegalLinks": "Footer legal links"}}, "prefixedRoutesActive": false}
{"schemaVersion": "1.0.0", "pageId": "legal:dpa", "locale": "en-US", "contentLocale": "en-US", "status": "native", "fallbackReason": "", "canonicalPath": "/legal/dpa", "routePath": "/legal/dpa", "family": "legal_trust", "title": "Data Processing Addendum", "description": "", "editionDigest": "2b1cd9ae427f285e89b4b65b062cbdd3f34401fc97c9cc8923c108d59557a526", "revision": "2b1cd9ae427f285e89b4b65b062cbdd3f34401fc97c9cc8923c108d59557a526", "canonicalContentDigest": "a66ca197654d1e7ded92a7271fb0fcaee35559644ae247d44f04539d9e56bedf", "anchors": ["assistance", "current-status", "processing-scope", "security-measures"], "serverOwned": true, "metadata": {"title": "Data Processing Addendum", "description": "", "canonicalPath": "/legal/dpa", "htmlLang": "en"}, "payload": {"page": "dpa", "content": {"commitments": ["This page is a summary, not an executed Data Processing Addendum.", "XMemo can act as a processor for customer-provided memory data under an enterprise agreement.", "Customer administrators remain responsible for lawful instructions, retention settings and notices to their users.", "We help with export and deletion requests through audited procedures, and record completion without copying personal data."], "kicker": "Legal", "last_reviewed": "2026-09-29", "lead": "How XMemo processes data on behalf of business customers, the safeguards in place, and how to put a Data Processing Addendum in place.", "sections": [{"body": "This page is a public summary for customers evaluating XMemo. It is not an executed Data Processing Addendum and does not by itself create processor obligations.", "id": "current-status", "items": ["Free and Plus are described on [Pricing](/pricing). A Plus purchase does not execute a DPA or create a Business agreement.", "DPA, Business, seat, and order-form obligations apply only under a separate signed agreement, as stated in the Terms of Service.", "To put a DPA in place, contact privacy\u0040xmemo.dev."], "title": "Current status"}, {"body": "Processing covers hosted memory storage, recall and reflection, account and session management, team and organization administration, support diagnostics, and the technical service data needed to run and secure the service.", "id": "processing-scope", "items": ["Public discovery information and installer metadata never contain secrets.", "Writing memory requires a credential scoped to that memory, and XMemo checks the owner, team and organization of each request. Additional database-level row security depends on the deployment and must be confirmed for it.", "Administering the service requires an admin key, a console session, or a signed-in user with the right organization role."], "title": "Processing scope"}, {"body": "In production, XMemo requires HTTPS, secure cookies, protected token hashes, no plain-text key fallback, rate limits, private networking for its database and cache, and a production-readiness check before each release.", "id": "security-measures", "items": ["Production PostgreSQL must use certificate-validating TLS modes.", "MCP access should use revocable tokens stored in the database rather than fixed production tokens.", "Support bundles and data-request records exclude secrets and raw memory content."], "title": "Security measures"}, {"body": "We assist with export, deletion and incident response under documented procedures. Completion is recorded with request IDs, counts and timestamps, without copying personal data.", "id": "assistance", "items": [], "title": "Customer assistance"}], "source_note": "This summary does not replace a signed agreement. To request a DPA, contact privacy\u0040xmemo.dev.", "title": "Data Processing Addendum"}, "nav": [{"path": "/trust", "label": "Trust", "active": false}, {"path": "/legal/privacy", "label": "Privacy", "active": false}, {"path": "/legal/cookies", "label": "Cookies", "active": false}, {"path": "/legal/tos", "label": "Terms", "active": false}, {"path": "/legal/dpa", "label": "DPA", "active": true}, {"path": "/legal/subprocessors", "label": "Subprocessors", "active": false}, {"path": "/legal/tokusho", "label": "Commercial Disclosure", "active": false}, {"path": "/support", "label": "Support", "active": false}], "contentLocale": "en-US", "requestedLocale": "en-US", "fallbackReason": "", "decision": {"preferenceLocale": "en-US", "requestedLocale": "en-US", "contentLocale": "en-US", "fallbackReason": "", "source": "accept-language"}, "labels": {"product": "Home", "docs": "Docs", "mcp": "MCP", "skills": "Skills", "trust": "Trust", "login": "Log in / Sign up", "start": "Get started", "publicNavigation": "XMemo public navigation", "publicResources": "XMemo public resources", "brandHome": "XMemo home", "language": "Language", "loadingTrustContext": "Loading trust context", "trustContextUnavailable": "Trust context unavailable", "cachedTrustShell": "Showing the cached trust shell while the context API recovers.", "loadingLegalContext": "Loading legal context", "legalContextUnavailable": "Legal context unavailable", "cachedLegalTrustShell": "Showing the cached legal and trust shell while the context API recovers.", "startPilot": "Get started", "openProductNavigation": "Open public navigation", "pageMetadata": "Page metadata", "lastReviewed": "Last reviewed", "sourceBackedPublicSummary": "Source-backed public summary", "legalAndTrust": "Legal and trust", "commitments": "Commitments", "memoryOsLegalTrustCenter": "XMemo legal and trust center", "footerLegalLinks": "Footer legal links"}}, "prefixedRoutesActive": false}