Supported scope
- A controller engaging a processor (e.g. a SaaS vendor, agency, or outsourced service) to process personal data on its behalf.
- Every mandatory Article 28(3) clause — processing instructions, confidentiality, security, sub-processors, data subject rights assistance, breach notification, audit rights, deletion or return of data.
- International transfers only where a genuine lawful transfer mechanism is named.
- Special category data only where the additional safeguards in place are specified.
UKDocs AI is a document-drafting service, not a law firm or solicitor. Both parties must verify this agreement accurately reflects their actual processing activities and safeguards before relying on it.
Create a Data Processing Agreement draft
From £12. Every Article 28(3) mandatory clause, built from your actual processing details.
Generate now — £12/docWant to compare plans first? See pricing or read the main FAQ.
Frequently asked questions
Common questions about this document. If you don't see your question here, email us.