Mahope tools: EUComply Clean Copy DeskUptime Transmute BugBottle All tools
mahope.tools by mahoje.dk
ENDA
FREE TOOL

GDPR Data Processing Agreement Generator

Answer 10 questions → get a ready-to-sign Article 28 DPA between your agency (processor) and your client (controller). No signup, nothing leaves your browser.

1. The parties
2. The services

Hold Ctrl/Cmd to select several.

3. Sub-processors

Leave empty if no sub-processors are used today.

4. Terms

Why every agency needs a DPA

  • It is legally required. GDPR Article 28(3): no processor may process personal data for a controller without a written contract containing the mandatory clauses. Working without one exposes both parties to fines up to €10 million or 2% of global turnover.
  • Enterprise clients ask for it first. In vendor assessments the DPA is the first document requested. Having a standard one ready shortens sales cycles.
  • It defines who does what when something goes wrong. Breach notification duties, sub-processor approval and audit rights are agreed before an incident — not during one.
'; var blob = new Blob([doc], { type: 'text/html' }); var a = document.createElement('a'); a.href = URL.createObjectURL(blob); a.download = 'dpa-' + current.client.toLowerCase().replace(/[^a-z0-9]+/g, '-') + '.html'; a.click(); URL.revokeObjectURL(a.href); }); })();