A Data Processing Agreement (DPA) is a contract that applies when one party (the “controller”) uses another party (the “processor”) to process personal data on its behalf.
When using DMARCwise, your organization acts as the controller and DMARCwise acts as the processor for some categories of data. Organizations that process data of individuals in the European Union are generally required to have a DPA in place with their processors.
For more details about our privacy practices, GDPR, and the DPA, please refer to our Privacy and GDPR page.
The full text of the DPA, including all annexes, is available at Data Processing Agreement. Refer to that page for all legal details, including the description of the processing, the list of sub-processors, and the applicable standard contractual clauses.
Agreeing to the DPA
Permissions
- Only the Owner of the organization can accept and manage the DPA.
To accept the DPA:
- Navigate to Settings → Data Processing (GDPR).
- Review the DPA preview.
- Fill in your organization’s details as the data controller:
- Data controller name: your organization’s legal name.
- VAT number (optional).
- Address: your organization’s registered address.
- Represented by: full name of the person signing on behalf of the organization.
- Title: their role or title (e.g. CEO, Legal Representative).
- Click Accept Data Processing Agreement.
A signed copy of the DPA with your details will be generated. You can download it as a PDF at any time from the same page by clicking Download PDF.
Updating the DPA
If your organization’s details change after accepting the DPA, you can update them:
- Navigate to Settings → Data Processing (GDPR).
- Edit the fields in the Update data controller details section.
- Click Update data controller.
A new signed copy reflecting the updated details will be generated and available for download.
