Data Processing Agreement (DPA)

A DPA is an agreement between a company (the controller) and a service provider (the processor) who processes personal data on behalf of the company.
It is mandatory under the GDPR (General Data Protection Regulation) and defines how the service provider protects and processes the data, as well as which security measures must be followed.

Typical contents of a DPA include:

• Purpose and nature of the processing
• Rights and obligations of both parties
• Data protection measures and security precautions
• Deletion or return of data after the contract ends
• Audit and inspection rights of the controller

You can access our DPA here: Data Processing Agreement