Legal
Data Processing Addendum
Public overview and request path for the contractual data-processing addendum.
Legal text must be reviewed for the operating entity, jurisdictions, actual systems and contracts.
Status
Not published. This page states the document's scope, not its terms.
Owner: Legal counsel
This document has not been published yet
What follows is its scope and what it is waiting on — not a draft. A document of this kind written speculatively would read as though it had been reviewed, and someone would rely on it.
If you need any of this answered before it is published, ask. We will give you the current position in writing, including where the answer is "not yet decided".
What it will cover
- pendingController and processor roles
- pendingSubject matter, duration, nature and purpose of processing
- pendingCategories of data subject and personal data
- pendingTechnical and organisational security measures
- pendingSubprocessing, audit and assistance obligations
- pendingReturn and deletion on termination
What it is waiting on
- The confirmed legal operating entity
- The subprocessor list
- Appendix D item 5: security controls actually implemented
- Legal review
Owner: Legal counsel
Need this answered now?
Send the specific question — a security review, a data-processing requirement, a procurement clause — and we will answer against what is actually true today.