RenderCache
RUEN
Sign in

Version 1.0 · effective 23 October 2026

Data Processing Agreement

This Data Processing Agreement (DPA) forms part of the agreement between the Customer and the RenderCache service and sets the terms on which the Service processes personal data on the Customer's instructions under Article 6(3) of Federal Law No. 152-FZ. If the Russian version differs from this translation, the Russian version prevails.

01Roles

The Customer is the operator (controller) of the personal data of its employees and contractors to whom it grants workspace access. The Service processes that data on the Customer's behalf and only for the purposes set out here.

02Scope

Data subjects
Customer employees and contractors
Data
full name, work email, role, IP addresses, activity logs
Operations
collection, recording, storage, use, deletion
Duration
term of the agreement + 30 days
Location
Russian Federation

Customer Content (caches, scenes, textures) is encrypted with the Customer's keys and is never decrypted by the Service; any personal data it may contain is stored in encrypted form only.

03Service obligations

  • process data only on the Customer's documented instructions;
  • keep data confidential and give access only to staff who need it;
  • apply the safeguards required by Article 19 of 152-FZ and the security annex;
  • help the Customer respond to data subject requests;
  • delete data at the end of the agreement and confirm deletion on request.

04Security measures

  • client-side AES-256-GCM encryption, TLS 1.3 and mTLS in transit;
  • workspace isolation and separate metadata keys;
  • multi-factor authentication for Service staff and an administrative access log;
  • encrypted metadata backups with quarterly restore tests;
  • an annual external penetration test; results are available to Enterprise customers under NDA.

05Sub-processors

The Service engages only infrastructure providers located in the Russian Federation. The current list is available on request; the Customer is notified 30 days before a new sub-processor is added and may object.

06Incidents

The Service notifies the Customer of any incident involving unlawful transfer or disclosure of personal data within 24 hours of detection and provides the information the Customer needs to notify Roskomnadzor within the deadlines set by Article 21 of 152-FZ.

07Audit

Once a year the Customer may request documents confirming compliance with this DPA; Enterprise customers may also carry out an audit with 30 days' notice.

08Signature

This DPA takes effect together with the agreement. A signed copy is available from legal@rendercache.ru.