Legal
Data processing addendum
For offices whose own obligations require a processor agreement alongside the BAA.
Placeholder, not a legal document yet
This page is a structural outline only. Nothing on it is in force, and none of it has been reviewed by counsel. It is excluded from search engines until the final text is approved.
Owner: Counsel
When this applies
Which customers need this in addition to the BAA.
Roles of the parties
Controller and processor, and the boundary of each responsibility.
Processing details
Subject matter, duration, nature and purpose, categories of data and data subjects.
Security measures
The technical and organisational measures annex.
Transfers
Transfer mechanism if data leaves the customer jurisdiction.
Audit and assistance
Audit rights and the assistance we provide for data-subject requests.