Data processing agreement
Last updated: July 2026
Roles
When you use Handover to manage tenant inspections, your agency acts as the Data Controller for tenant personal data. Handover acts as the Data Processor, processing data solely on your instructions.
Processing scope
Handover processes tenant names, emails, property addresses, photos, signatures, and dispute comments as necessary to provide the inspection documentation service.
Security measures
We implement row-level security, encrypted storage, signed URL access, HTTPS enforcement, and access controls to protect personal data.
Sub-processors
We use Supabase (EU/US), Stripe (payment), and Resend (email) as sub-processors. A current list is available upon request.
Data subject requests
As Data Controller, you are responsible for responding to tenant data subject requests. Handover will assist you in fulfilling such requests within 30 days.