Legal

Data Processing Agreement

DPA information for teams evaluating DPAFlow as a subprocessor monitoring vendor.

Draft — pending attorney review

This page is an internal draft prepared for attorney review. It does not constitute final legal advice and has not been approved by qualified legal counsel. Do not treat this content as a binding legal document.

DPA coverage

Product data

The DPA should cover account data, monitored vendor records, watchlists, alerts, and report exports.

Subprocessor transparency

The DPA should link to the current DPAFlow subprocessor list and change notification process.