D-Local: DPA, subprocessors and transfers

What to put in your subprocessor list

A ready row. Replace the purpose with what your client actually uses D-Local for.

Questions people ask about D-Local

Which legal entity does D-Local contract through?

Dlocal LLP, registered in United Kingdom. That is the name to put in a record of processing or a sub-processor list, not the brand.

What covers a transfer of personal data to D-Local outside the EEA?

Adequacy decision. The European Commission has found the country's protection essentially equivalent to the EU's, so transfers need no further mechanism. Whether that is enough for a particular processing operation is a judgement for the controller.

Where is D-Local's trust center?

D-Local publishes it at https://dlocal.com/legal/brazil/seguranca-cibernetica/. A trust center, trust page or security page is the same thing under different names: the vendor's own account of how it protects data, and the place it keeps its certifications. It is D-Local's page, so we link to it rather than repeat what it says.

Where to go next

Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.

• Vendors contracting from United Kingdom70 in the registry
• The vendor registryLegal entities, transfer mechanisms and DPA links, checked by a person
• Download the registry as a CSVFree, for a spreadsheet
• Guides for privacy practicesHow the work is actually done

Other payments

Six of them. All payments in the registry · others that transfer the same way.

• Access Systems (UK)GB
• Adapty TechUS
• AdyenNL
• Buypass ASNO
• ChargebeeUS
• ChargehoundUS