Snapshot 33904

Document

Data processing addendum

URL

https://cignal.io/Cignal-DPA.pdf

Fetched

2026-10-02 18:07:06 UTC

HTTP status

200

Content type

application/pdf

Fetch mode

pdf

Size

115948 bytes

SHA-256 (raw)

6f3ae341942743a686d1f2576530a3062953aca0f53190317a5e2a11be1b4112

SHA-256 (normalized text)

42b87aa33fb14aa226eea00754900e1f31ac60ab55ce9ba269e9921ee7460c87

Normalized text

Scripts and page chrome removed; this is what change detection compares.

DATA PROCESSING AGREEMENT
(DPA)
Effective: April 2026

1. Parties
Controller ↔ Cignal (Processor)

2. Scope
Processing for programmatic advertising services.

3. Nature and Purpose
   •   bidstream processing
   •   RTB facilitation
   •   ad delivery
   •   measurement
   •   fraud detection
   •   optimization

Processing is:

   •   real-time
   •   automated
   •   infrastructure-level

Uses OpenRTB standards.

ADDITION

Processor may also participate in RTB transactions involving the buying or selling of advertising
inventory; however, processing of personal data remains limited to bidstream-level processing
and does not include independent user profiling or audience creation.
4. Data Categories
   •   IP
   •   device IDs
   •   device characteristics
   •   bidstream
   •   non-precise location

No:

   •   profiles
   •   demographics
   •   identity graphs

5. Data Subjects
End users of digital media.

6. Obligations
   •   process on instruction
   •   secure data
   •   assist requests
   •   notify breaches
   •   delete data

7. Subprocessors
Allowed with safeguards.

8. Security
Encryption, logging, controls.
9. Retention
Max 90 days.

10. Rights
Handled via controller.

11. Transfers
SCCs applied.

12. Breach
Notify without delay.

13. Audit
Reasonable audit rights.

14. Termination
Delete or return data.

15. Liability
Each party responsible.