Nylas has Data Processing Agreement (DPA) terms within our standard Master Service Agreement (MSA)/order form, which covers our joint obligations for GDPR. Upon request, Nylas also has a standard DPA that covers the same terms, but as an additional contractual document. A Security Whitepaper is available that outlines some of the steps Nylas takes to maintain security and data privacy in our application. More information about Nylas’ Security & Privacy practices are available on the Nylas Trust Center and Security Page.
Nylas has an EU data center located in Ireland. Data is not transferred between the EU and US data centers. Our list of Nylas subprocessors can be found here.