Update DPA: replace stale Delve subprocessor URLs with trust.kernel.sh (#329)

Kernel migrated from Delve to Vanta for compliance management, but the
DPA still referenced trust.delve.co/kernel for the subprocessor list.
Updated both Exhibit B references to trust.kernel.sh/subprocessors and
bumped the Last Modified date.

Made-with: Cursor

Author: ulziibay-kernel

dpa.mdx

@@ -2,7 +2,7 @@
 title: "Data Processing Agreement"
 ---
 
-Last Modified: November 10, 2025
+Last Modified: April 13, 2026
 
 This Data Processing Addendum (“DPA”) supplements the [Master Services Agreement](/tos) (the “Agreement”) entered into by and between Customer, as identified in the Agreement, (“Customer”) and Kernel Technologies, Inc. (“Kernel”) (together with Customer, the “Parties”). This DPA incorporates the terms of the Agreement. Kernel may update this DPA from time to time, and we will provide reasonable notice of any such updates. Any terms not defined in this DPA shall have the meaning set forth in the Agreement.  
 
@@ -227,15 +227,15 @@ Role (controller/processor): As provided in Section 2 of the DPA.
 | Purpose of the Processing | As described in Exhibit A of the DPA |
 | Duration of Processing and Retention (or the criteria to determine such period) | As described in Exhibit A of the DPA |
 | Frequency of the transfer | As necessary to provide perform all obligations and rights with respect to Personal Data as provided in the Agreement or DPA |
-| Recipients of Personal Data Transferred to the Data Importer | A list of the Company's Authorized Subprocessors is available at https://trust.delve.co/kernel.  |
+| Recipients of Personal Data Transferred to the Data Importer | A list of the Company's Authorized Subprocessors is available at https://trust.kernel.sh/subprocessors.  |
 
 3. **Competent Supervisory Authority**
 
 The supervisory authority shall be the supervisory authority of the Data Exporter, as determined in accordance with Clause 13 of the EU SCCs. The supervisory authority for the purposes of the UK Addendum shall be the UK Information Commissioner's Officer. 
 
 4. **List of Authorized Subprocessors**
 
-A list of the Company's Authorized Subprocessors is available at https://trust.delve.co/kernel.  
+A list of the Company's Authorized Subprocessors is available at https://trust.kernel.sh/subprocessors.  
 
 ## Exhibit C