The structure required for company customers where the academy processes personal data on their behalf.
When it applies
A production DPA is needed where a company customer is controller and the academy processes personal data as processor. It must be completed against the chosen legal entity, hosting region, subprocessors and service configuration.
Minimum clauses
The final DPA must set out documented instructions, confidentiality, security measures, subprocessor notices, assistance with data-subject rights and incidents, deletion or return, audit arrangements and international-transfer terms where relevant.
No execution in preview
This prototype does not execute a DPA and is not a substitute for legal review or a signed customer agreement.