Changes to MongoDB Data Processing Agreement

Updated: October 21, 2024.

We have made minor edits to Sections 2 and 9 of our DPA to clarify that:

• The DPA does not cover any obligations that may arise under Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector and amending Regulations (“DORA”); and
• “Deployment Region” means the region(s) in which Customer Personal Data physically resides through Customer’s chosen configuration of the Cloud Services.

Updated: December 5, 2023.

We have updated our DPA to reflect MongoDB’s certification to the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and Swiss-US Data Privacy Framework. Please see Section 9.3 of our DPA for additional information.

Updated: September 16, 2022.

We have updated our DPA to:

• Account for changes to the legal regime for transfers of personal data out of the United Kingdom;
• Clarify the terms relating to transfers of personal data out of the European Economic Area and Switzerland; and
• Incorporate updates required under the California Privacy Rights Act of 2020.

Updated: September 27, 2021.

We updated our DPA to include the new Standard Contractual Clauses approved by the European Union in June 2021. The new SCCs align with GDPR and also address issues raised by the European Court of Justice in its Schrems II decision.

Updated: June 28, 2021.

We updated this DPA to (i) describe our obligations with respect to third-party requests for Customer Personal Data, including government requests and (ii) clarify the circumstances under which Customer Personal Data may leave the EEA or the United Kingdom.