Data processing agreement

A signed Data Processing Agreement (DPA, Auftragsverarbeitungsvertrag) is part of every NextPKI customer contract.

Our template will be available for download here ahead of the first pilot signature. In the meantime, request a copy at hello@nextpki.com.

The template covers:

• Subject matter, duration, nature and purpose of processing
• Categories of personal data and data subjects
• Technical and organisational measures (Art. 32 GDPR)
• Subprocessor list (hosting provider, payment provider, support tooling); current snapshot maintained at /legal/subprocessors/
• Audit rights, data return and deletion, international transfer safeguards (SCCs where applicable)