Placeholder — this page's final copy hasn't been written yet. What's below is accurate but minimal.
A DPA ships before general availability. If you're a security reviewer doing diligence in the meantime, the technical half of your questions is probably answered on the security page — encryption scheme, blast radius, and where data physically lives.
For the contractual half: hello@edgevault.io.