Business data processing

Data Processing Agreement

Check the current agreement status and contact SpecSprout to discuss your business data-processing requirements. Account creation does not enter you into a separate DPA.

Loading DPA status…

What a reviewed DPA should cover

Scope first, signature second.

Processing details

Controller/processor roles, subject matter, duration, data types, categories of data subjects, documented instructions and confidentiality obligations.

Security & subprocessors

Technical/organizational measures, provider/subprocessor process, international transfers, incident cooperation, deletion/return and audit/assurance rights as legally appropriate.

The information here does not itself create an agreement. A DPA must address the actual processing relationship and be agreed by the parties.