GDPR Data Processing Agreement Generator
Answer 10 questions → get a ready-to-sign Article 28 DPA between your agency (processor) and your client (controller). No signup, nothing leaves your browser.
Generated agreement
Next steps: build your register with the free RoPA generator, publish a policy with the free privacy notice generator, and check your public pages with the free EAA scanner. See all free tools. This document is a draft and does not constitute legal advice.
Why every agency needs a DPA
- It is legally required. GDPR Article 28(3): no processor may process personal data for a controller without a written contract containing the mandatory clauses. Working without one exposes both parties to fines up to €10 million or 2% of global turnover.
- Enterprise clients ask for it first. In vendor assessments the DPA is the first document requested. Having a standard one ready shortens sales cycles.
- It defines who does what when something goes wrong. Breach notification duties, sub-processor approval and audit rights are agreed before an incident — not during one.
The agreement says what you promise. The tool checks whether you keep it.
The generator is free, and it walks through every mandatory clause in Article 28 — subject and scope, categories of data, Article 32 measures, sub-processors, assistance after a breach, deletion, transfers and audit rights. That is the whole document. The paid DPA template ($59) covers the same annexes — subject, duration, purpose, categories of data, security measures and sub-processors — in PDF and Markdown, so it adds nothing you do not already have here. EUComply Pro does what an agreement cannot: it opens your site and measures whether the measures you promised the client are actually there. Five of the 18 server-side checks are exactly that — HSTS, a content security policy in the response and in the metadata, the privacy link and the consent banner — and together with the 15 accessibility rules that makes 33 checks in all. $79/year per website, and the report can be sent on as a PDF.