Data Processing Agreement Drafter

Data Processing Agreement (scaffold). Between Acme Ltd (controller) and CloudOps Inc (processor). Subject and duration: processing of customer data for the term of the main services agreement. Nature and purpose: hosting and support of the controller application. Data types: names, emails, usage logs; data subjects: the controller end users. Processor obligations: process only on documented instructions, ensure confidentiality, assist with data subject requests. Sub-processors: only with prior authorization and equivalent terms. Security: encryption in transit and at rest, access controls, breach notification within 72 hours. On termination: delete or return all data. This is a template scaffold, not legal advice; have a qualified lawyer review before signing.