Data Processing Addendum
Last updated: replace before launch
This template outlines a sample Data Processing Addendum, or DPA, between 7X Advertising and a customer whose data it handles. It is generic and illustrative only. A real DPA should be drafted or reviewed by a qualified professional to fit your obligations.
Roles of the parties
In this sample, the customer acts as the data controller, deciding why and how personal information is processed. 7X Advertising acts as the data processor, handling that information on the customer's instructions and only for the agreed purposes.
Scope of processing
This template assumes processing is limited to what is needed to deliver the service described in your main agreement. Spell out here the types of data involved, the categories of people it relates to, and the length of time it is kept.
Security measures
This sample commits the processor to reasonable technical and organizational measures to protect personal information. Common placeholders include:
- Access controls that limit who can see the data.
- Encryption of data in transit where appropriate.
- Regular reviews of security practices.
- A process for handling any suspected data incident.
Sub-processors
This template assumes 7X Advertising may use third-party sub-processors to help deliver the service, and that it remains responsible for their work. List your actual sub-processors and your process for notifying customers of changes in your own version.
Contact
To request the current sub-processor list or ask about this template addendum, email ethan@7xadvertising.com. Replace this placeholder with your real data protection contact before launch.