Data Processing Agreement
Article 28 GDPR requires every controller (you) to put a data processing agreement in place with every processor (us) that handles personal data on your behalf. The Plaithy DPA is bundled with your Business and Enterprise subscription and is available below.
Checking your plan…
What the DPA covers
- Subject matter, duration, nature and purpose of processing.
- Categories of personal data and data subjects.
- Sub-processors and the change-notification process.
- Technical and organisational measures (Art. 32 GDPR).
- Standard Contractual Clauses for any third-country transfer.
- Personal-data-breach notification within 72 hours.
- Annual audit rights with reasonable notice.
- Return or deletion of personal data on termination of the service agreement.
For DPA-related questions, including custom redlines for Enterprise customers, contact support@plaith.ai.