Data Processing Agreement (DPA)

What is a DPA?

A DPA (Data Processing Agreement) is a contract between a data controller (you) and a data processor (Sidekick Mark) that describes how personal data is processed.

• Defines the responsibilities of both parties
• Describes what data is processed and for what purposes
• Documents technical and organizational security measures
• Regulates the use of sub-processors
• Describes data subject rights and how to handle them

When do you need a DPA?

Under GDPR, a data processing agreement is required when:

• You store personal data of your customers or employees in our software
• You use our AI tools to generate content based on customer data
• You use our analytics to analyze website visitors
• Your business is located in the EU/EEA or you have EU citizens as customers

If you're unsure whether you need a DPA, we recommend requesting one. It's free and protects both parties.

What does our DPA contain?

Our standard data processing agreement covers the following topics:

• Definitions and scope of processing
• Obligations of Sidekick Mark as processor
• Technical and organizational measures (TOMs)
• Use of sub-processors (e.g., Vercel, Neon, OpenAI)
• International data transfers (Standard Contractual Clauses)
• Assistance with data subject requests
• Data breach notification within 48 hours
• Audit rights and certifications
• Termination and data deletion

Request a DPA

Our DPA is available for all paid subscriptions. After requesting, we will send you a signed copy within 2 business days.

Questions?

Do you have questions about our DPA or data processing?

We respond within 2 business days.