legal

Data Processing Agreement

last updated: 2026-05-07 — ORQRO LLC, Lincolnshire, Illinois, United States

scope

This Data Processing Agreement (DPA) is between ORQRO LLC (Processor) and you (Controller) and governs the processing of personal data in connection with the orqro service.

processing details

orqro processes personal data on your behalf for the purposes of providing the freight management platform. Categories of data subjects: your employees, customers, and carriers. Categories of data: contact information, operational records, financial transactions.

processor obligations

orqro will: process data only on your documented instructions; ensure persons authorized to process data are bound by confidentiality; implement appropriate technical and organizational security measures; assist you in fulfilling your obligations under applicable data protection law.

sub-processors

orqro uses the following sub-processors: Neon (database infrastructure), Vercel (hosting), Resend (email delivery), PostHog (analytics). A current list is maintained at orqro.com/legal/sub-processors.

security measures

orqro implements: encryption at rest (AES-256) and in transit (TLS 1.3); per-tenant encryption keys; row-level security; SOC 2 Type II controls (in progress); regular security audits.

data subject rights

orqro will assist you in responding to data subject rights requests within the timeframes required by applicable law.

transfers

For transfers of personal data outside the EEA, orqro relies on Standard Contractual Clauses (SCCs) as approved by the European Commission.