Legal
Data Processing Agreement (DPA)
Standard DPA with SCCs for sub-processors outside EU/EEA — available from Growth tier.
Our standard DPA is based on the EU Standard Contractual Clauses (SCCs) and covers both parties' obligations under Art. 28 GDPR. On request we provide the current draft including the sub-processor list.
What the DPA covers
- Purpose and duration of processing
- Nature and purpose of personal data
- Controller's obligations and rights
- Technical and organizational measures (TOM)
- Sub-processor list with SCCs for third countries
- Audit and information rights
- Data deletion and return obligations at contract end
Email sales or use the contact form to receive the current DPA draft.