Data Processing Addendum (DPA) for U.S. Personal Data

A processor-friendly addendum a vendor attaches to its customer agreement to cover how it handles U.S. personal data, including security measures and state privacy law terms.

Current Version

Source: General Legal (CC0 1.0)

Use this template

Easy PDF filling and editing

Fill out forms in your browser without installing software
Files are processed on our own server and not shared with third parties
Instant export of the completed document in PDF format

Instructions for filling out Data Processing Addendum (DPA) for U.S. Personal Data

This template is used for official filing and documentation. Below are detailed instructions for completing, requirement details, and submission rules.

Who needs to fill out this document?

This form is designed for use by legal entities, individuals, or authorized representatives in the following cases:

SaaS vendors answering customer DPA requests.
Procurement teams collecting vendor privacy paperwork.
Privacy counsel looking for a starting draft.

What you will need before starting

Before filling out the interactive form, prepare the following details and documents:

1. Vendor nameThe company acting as the processor (Provider).

2. Customer agreementThe name and effective date of the agreement the DPA attaches to.

3. Annex detailsRoles, contact emails and a short company description in the annexes.

4. Security measuresThe measures you actually apply, so the annex matches reality.

Step-by-step filling process

Identify the main agreement: Enter the vendor name and the customer agreement and its date.
Complete the annexes: Fill in roles, contacts and the company description.
Check the security section: Confirm the measures described are ones you really use.
Sign: Both parties sign; the DPA takes effect on the date both have signed.

Frequently Asked Questions (FAQ)

Does it cover GDPR data?

No. This version is for U.S. personal data. Use the global version when EU, UK or Swiss data is involved.

Who is the 'Provider'?

The vendor that processes personal data on behalf of the customer. The template is written from that side.

Is this legal advice?

No. The author publishes it for general reference, not as advice on your situation. Have a qualified lawyer review it before you sign, especially if you operate outside the United States.

Ready to fill out Data Processing Addendum (DPA) for U.S. Personal Data?

Open the editor, enter the required details, and download your document in a couple of minutes.

Proceed to fill out →

Related templates