Pre-signed DPA: valid versions
Every page of a pre-signed DPA prints its version, the SHA-256 fingerprint of the DPA text and the template revision. A copy is a Better ISMS signed text only if its fingerprint is listed here. A fingerprint identifies the text; it does not prove a given PDF is unmodified. To check a copy, compare its clauses with the source published for that fingerprint (the fingerprint is the SHA-256 of that file's exact bytes).
Current PDF: better-isms-dpa-2026-11-12-0875784ba4db.pdf (file SHA-256 98ac8b2b16642f3f737a264b51411c093fe7b7b7f2290558362d069d672eed7e)
An offer in a signed copy lapses 60 days after a later version is published, or on the date a version is marked withdrawn here (DPA §7.4(f)).
| Version | Status | Fingerprint (SHA-256) | Source |
|---|---|---|---|
| 2026-11-12 | current approved for issue on 2026-11-12 | 0875784ba4dbc5ac0b90659d8884dcd3123bf8c28143c17c8f617052cc99258f§2.4: the Fireworks AI row describes its two contractual paths (Fireworks' Data Processing Addendum on ISMS Copilot's account, or OpenRouter's sub-processor terms), the settings sent with each request for customer content sent for chat and document review, and document reviews in its role; the notes on zero retention cover settings sent with a request and short-lived in-memory prompt caches; §3.1, §3.2 and §3.3 name Fireworks' Standard Contractual Clauses; §2.3 states the session rules. No new sub-processor, category of personal data or destination country. | dpa-2026-11-12.md |
| 2026-10-26-r2 | superseded on 2026-11-12 approved for issue on 2026-10-26 | fed4cacb8b5a5dd21ef8c6fa5dc02fbb180963a591c08bf784f7b150f2909c27§3.3 lists the in-transit measure as encryption in transit (TLS 1.3). No change to processing, sub-processors, retention or transfers. | dpa-2026-10-26-r2.md |
Cover and signature page template revisions:
- Revision 1: draft, never issued, not published
- Revision 2: dpa-template-r2.txt (text SHA-256
e08f8ad6e53488ab337434f9f7cff78cc572ea92f0df33f3d35547fe78ccab87)