Skip to content
NextPKI

Data processing agreement

A signed Data Processing Agreement (DPA, Auftragsverarbeitungsvertrag) is part of every NextPKI customer contract.

Our template will be available for download here ahead of the first pilot signature. In the meantime, request a copy through the request form and mention the DPA.

The template covers:

  • Subject matter, duration, nature and purpose of processing
  • Categories of personal data and data subjects
  • Technical and organisational measures (Art. 32 GDPR)
  • Subprocessor list (hosting provider, payment provider, support tooling), supplied with the template and updated before any change takes effect
  • Audit rights, data return and deletion, international transfer safeguards (SCCs where applicable)