Which GEO agreements are signed, and when?
Every agreement below is signed before we see an account, an analytics property or a prompt set. That covers a mutual NDA, processor terms for any personal data, and transfer clauses where your jurisdiction requires them. Access runs on your seats and you can revoke it any day.
Non-disclosure agreement (NDA) — mutual, and signed before we see any analytics, prompt set or account.
Data processing agreement (DPA) — Article 28(3) of the GDPR, or your national equivalent, sets our processor duties for personal data in analytics or author profiles.
International data transfers — no personal data moves across a border until standard contractual clauses, or the instrument your jurisdiction names, are signed.
Access — editor-level access to your CMS and read access to Search Console, on your seats, revocable by you; no page is hosted on our side.
Certifications — a certification is named only when held, and none is claimed here.