Data Processing Agreement (DPA)
This document supplements the Privacy Policy and describes processing of personal data on behalf of the customer under Art. 28 GDPR and corresponding Swiss law.
Parties
Controller: the customer using Hermes Agents. Processor: wservices GmbH, Freiburgstrasse 562, 3172 Niederwangen, Switzerland.
Subject matter
Provision of the Hermes Agents platform including hosting of company workspaces, authentication, billing, and metered LLM usage via connected gateways.
Instructions
Processing is carried out only on documented instructions of the controller, including this DPA and product configuration in the customer account.
Security
Technical and organisational measures include encryption of secrets (sealed vault), access controls, tenant isolation, and logging of security-relevant events.
List of sub-processors
The customer authorises the following sub-processors. Material changes will be communicated appropriately.
| Name | Purpose | Location / region |
|---|---|---|
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Payment processing, invoicing, and card vaulting | USA / EU (Ireland), depending on account configuration |
| Requesty | LLM gateway / model routing for agent completions | EU option available; see provider DPA |
| DjangoEurope (wservices) | Managed hosting API for per-company environments (system users, DNS, TLS, databases, reverse proxies) | EU / Switzerland (wservices group infrastructure) |
| netcup GmbH | Cloud / server infrastructure for platform or tenant workloads (where provisioned) | EU (Germany and other EU regions) |
| Hetzner Online GmbH | Cloud / server infrastructure for platform or tenant workloads (where provisioned) | EU (Germany, Finland) |
| OVHcloud (OVH SAS) | Cloud / server infrastructure for platform or tenant workloads (where provisioned) | EU (France and other EU regions) |
| IONOS SE | Cloud / server infrastructure for platform or tenant workloads (where provisioned) | EU (Germany and other EU regions) |
| Infomaniak Network SA | Cloud / server infrastructure for platform or tenant workloads (where provisioned) | Switzerland / EU |
Only providers that may process customer personal data for Hermes Agents are listed. Self-hosted components (e.g. Headscale VPN control plane, Mattermost, password manager) run in the customer environment and are not third-party cloud sub-processors. DjangoEurope is the managed hosting platform of the wservices group used to provision tenants.
International transfers
Where a sub-processor processes data outside the EEA/Switzerland, appropriate safeguards (e.g. Standard Contractual Clauses) apply unless an adequacy decision covers the transfer.
Contact
DPA requests: info@hermes-agents.com · Legal notice