This DPA foundation describes controller and processor roles, processing instructions, confidentiality, security controls, subprocessors, international transfers, incident assistance, data-subject requests, deletion or return, audit cooperation, and processing categories.
It requires counsel review before execution and does not assert SCCs or other jurisdictional mechanisms.