DPA template

A DPA frames the processing of personal information by a supplier (see the SaaS leadership track).

Download: Markdown template (French text; adapt the language to your contracts)

Essential clauses

1. Purpose, roles and description of processing
2. Limited use for the mandate (and no AI trained on the data without written agreement)
3. Security measures
4. Further subprocessors (list, notice, objection)
5. Data location
6. Incident notice without delay
7. Assistance with individual rights
8. Audit (SOC 2 / ISO 27001 reports)
9. End of contract: export then confirmed deletion

Variables to fill in: parties, term, data categories, deadlines, regions, subprocessor list.