Contract templates currently German only
Data Processing Agreement (DPA)
GDPR-compliant data processing — with explanations of TOMs, SCCs and sub-processors.
The DPA governs the processing of personal data by a service provider on your behalf. It is mandatory for hosting, CRM, payroll, marketing tools and almost every cloud solution involving personal data.
- Law by country
- GDPR-compliant
- No AI training
- PII masking
- Lawyer handover
- Seven languages
What's in this template
Numbers from the actual definition — not marketing slides.
- Clauses
- 29
- Clause variants
- 23
- Wizard fields
- 51
- Quality checks
- 23
- Legal basis citations
- 21
What the contract contains
- Subject matter & purpose of processing
- Categories of data subjects
- TOM packages (basic/ISO/high)
- Sub-processor model
- Third-country transfer (SCC)
- Audit and reporting duties
- Deletion after contract end
Optional additional clauses
- Arbitration clause
- Force majeure
- E-signature
- Notices
When you need this contract
- Cloud hosting with customer data
- CRM/ERP processors
- Marketing tools
- Outsourced payroll
Who it is for: Any company that processes personal data through service providers.
For complex fields such as the scope of services or the purpose, you can request a suggestion via the sparkle button — the suggestion stays editable before it enters the contract.
Once created, you can hand the contract to a suitable lawyer from our network with one click — including full text and metadata.
For health or financial data as well as special categories (Art. 9 GDPR) we recommend legal review.
Our templates are ready-made documents that you adapt to your case. They are not legal advice and do not replace a review by a lawyer; we give no guarantee of correctness, completeness or up-to-dateness. Use is at your own responsibility.
Frequently asked questions
A finished contract in 5 minutes.
Answer a few questions — the wizard does the rest. PDF + DOCX ready to download.
Read on
