Data Processing Agreement (DPA)

A Data Processing Agreement (DPA) is the contract that frames the processing of personal data between a controller and its processor, as required by Article 28 of the GDPR.

Ubidesk offers a DPA that defines the processing tied to the platform, the security measures and the sub-processors. It works together with data residency and the GDPR commitments.

In practice

Sign the DPA before rolling out remote access at a customer: it turns commercial commitments into contractual obligations.