04 Legal
Data Processing Agreement
For organizations that need the paper to match the math.
Status
The QERYX DPA is being finalized by counsel and is not yet published on this page. Organizations that need it now can request the current draft: legal at qeryx.app. Nothing unsigned is presented here as an executed instrument.
What the architecture fixes before any paper is signed
A DPA describes processing; the QERYX architecture minimizes what there is to describe. The relay processes sealed ciphertext it cannot open, opaque account and routing identifiers, and aggregate operational counters — the complete inventory, with its retention ledger, is published in the Privacy Policy and does not change because a contract is signed.
- Message, call, and media content: end-to-end encrypted on the device; never processed in plaintext by any party to the agreement.
- Identifying data at sign-up: none is requested — there is no name, phone number, or email to process.
- Retention: the published retention ledger governs; deletion is a hard database delete.
Subprocessors
A named register of subprocessors publishes in the Trust Center as part of its evidence set; the DPA will incorporate that register by reference so the contract and the public record can never diverge.