Data processing

Last updated: 13 August 2026

For most Envelope clients, our Privacy Policy covers how we handle personal data. Where you are a business and you (or your own clients) require a formal Data Processing Agreement (DPA), we can put one in place.

When a DPA applies

Where you engage Envelope to process personal data on your behalf as part of a brief, you are the data controller and RED (4923 LTD) acts as a data processor for that data. In that case a DPA setting out the processing terms required by UK GDPR Art. 28 applies.

Sub-processors

The third-party sub-processors we rely on to deliver Envelope are listed in our Privacy Policy (Stripe, Slack, Cloudflare, our AI provider(s), and, on the Call plan, cal.com and Fireflies).

Request a DPA

To request a signed DPA, email hi@slash.red with your company details.