LEGAL / DPA WORKING TEMPLATE
This working template maps the clauses a completed Data Processing Addendum must contain. It is not signed, effective or ready for execution until the contracting party and schedules are completed.
Ask about the DPA template↗STATUS
CURRENT
QUESTIONS
Before this template can be used, it must identify the legal parties, addresses, effective date, governing arrangement and authorised signatories. The completed document should receive jurisdiction-specific legal review.
The intended model treats the customer as controller for workspace content and the service operator as processor. Final language must limit processing to documented, lawful instructions needed to provide, secure and support the service.
A completed schedule must specify data subjects, data categories, purposes, processing activities, duration and retention. Likely categories include account, membership, task, contact, time, finance, support and service-log data.
The final schedule must describe technical and organisational measures that accurately reflect the service at signing. Public security information is context, not a certification or substitute for the completed schedule.
Before execution, the template must list the actual providers used for hosting, database, email, payment or support, together with purpose, processing region, contractual safeguards and the change-notification process.
The completed DPA must define assistance with data-subject requests, incident notification, deletion or return, compliance evidence and proportionate audit conditions without exposing other customers or system security.
CLEAR TERMS / DIRECT CONTACT