Data processing agreement checklist
OfficialOfficial · updated Nov 4, 2026 · v1.0.0
Checks a DPA for roles, subprocessors, security measures, breach notice, transfers, deletion, and audits against what your team can actually do.
Sign up free to add this skill to your pod
You come back here after you sign in, and add it with one click.
When to use it
- An enterprise customer sends their DPA with a contract
- You must sign a vendor's data processing addendum
What you give it
- DPA and main agreement
- Your role with the data
- Your hosting, vendors, and incident process
What you get
A rated clause table with a can-we-do-it column, promises still to confirm, and questions for counsel.
Changelog
- v1.0.0 · Nov 4, 2026 · First release.
Sources
- Art. 28 GDPR - Processor (2026-11-04)
- New Standard Contractual Clauses - Questions and Answers overview (European Commission) (2026-11-04)
- Standard Contractual Clauses (SCC) (European Commission) (2026-11-04)
Related skills
- Security questionnaire answers Drafts answers to a customer security questionnaire from your own policies and facts, marks unknowns with owners, and never overclaims certifications.
- Contract summary with key dates Summarizes a commercial contract into a one-page brief: fees, term, auto-renewal and notice dates, exit, liability, IP, data, and unusual clauses.
- NDA first pass Reviews an NDA clause by clause into a green/yellow/red table with quotes, hidden non-solicit or residuals flags, and questions for counsel.
- Terms or privacy update notice Drafts the email, banner, and summary table announcing a Terms or Privacy Policy change: what changed, effective date, action, links.