For businesses and their vendors

Data Processing Agreement Draft

A UK GDPR Article 28 agreement between a data controller and a data processor, covering every mandatory clause the law requires.

Supported scope

  • A controller engaging a processor (e.g. a SaaS vendor, agency, or outsourced service) to process personal data on its behalf.
  • Every mandatory Article 28(3) clause — processing instructions, confidentiality, security, sub-processors, data subject rights assistance, breach notification, audit rights, deletion or return of data.
  • International transfers only where a genuine lawful transfer mechanism is named.
  • Special category data only where the additional safeguards in place are specified.

UKDocs AI is a document-drafting service, not a law firm or solicitor. Both parties must verify this agreement accurately reflects their actual processing activities and safeguards before relying on it.

Create a Data Processing Agreement draft

From £12. Every Article 28(3) mandatory clause, built from your actual processing details.

Generate now — £12/doc

Want to compare plans first? See pricing or read the main FAQ.

Frequently asked questions

Common questions about this document. If you don't see your question here, email us.