⚠️ TEMPLATE — NOT LEGAL ADVICE. Replace every
[PLACEHOLDER]with reviewed legal copy before publishing.
1. Definitions
[PLACEHOLDER: Define "Controller", "Processor", "Personal Data", "Processing", "Sub-processor", and related terms.]
2. Subject Matter and Duration
[PLACEHOLDER: Describe the scope, nature, purpose, and duration of the processing.]
3. Processor Obligations
[PLACEHOLDER: Confidentiality, technical and organizational security measures, assistance to the controller, and breach notification.]
4. Sub-processors
[PLACEHOLDER: Reference the subprocessors list and the authorization / change-notification terms.]
5. International Transfers
[PLACEHOLDER: Standard Contractual Clauses or other transfer mechanisms.]
6. Audit and Deletion
[PLACEHOLDER: Audit rights, and return or deletion of personal data on termination.]