Data processing agreement

This page is not the executed DPA

A data processing agreement must be issued with the customer contract and signed by authorised parties. This page records the required scope but does not substitute for that agreement.

Required schedule

• Controller and processor roles for each data flow.
• Subject matter, duration, purpose, data categories and data-subject groups.
• Approved sub-processors, hosting locations and transfer safeguards.
• Security measures, incident notification, assistance, audit and deletion or return arrangements.
• Treatment of regulator, employee, customer and special-category information where applicable.

Pilot process

Assisted-pilot customers receive the approved DPA through the enterprise quote-to-contract workflow before production data is onboarded.