Free Data Governance Templates

Data Governance: 88 free templates to browse without an account, then edit with an AI agent and e-sign in GitLaw.

This category provides frameworks for handling sensitive information across jurisdictions like the European Union, United States, and Canada. It includes specialized templates such as the HIPAA Business Associate Agreement for healthcare data and the California Resident Notice at Collection for CPRA compliance. Employment and account management records fall here, but generic commercial contracts reside in the main Business category.

  • 88 templates
  • Free to edit with AI
  • No account needed to browse

Community library

Everything else in this category, uploaded by the GitLaw community. Read any of it free - check it fits your situation before you rely on it.

Featured
Privacy Policy (US) by OLL
This privacy policy outlines how a US-based entity processes personal data collected through digital services and offline interactions. It details specific consumer rights for residents of California, Colorado, Connecticut, and Virginia, including the right to opt out of data sales and profiling.
Updated 13 Aug 2026
FeaturedEuropean Union
Privacy Policy by Mozilla
This privacy policy template establishes how a company collects, uses, and protects personal information across its products and services. It defines personal information, outlines data collection methods like crash reports or browser checks, and specifies conditions for sharing data with third parties or government entities.
Updated 13 Aug 2026
Featured
Data Processing Agreement by Common Paper
This template establishes a framework for processing personal data between a service provider and a customer. It incorporates the Common Paper DPA Standard Terms and provides specific modules for EEA and UK data transfers.
Updated 13 Aug 2026
FeaturedUS
Business Associate Agreement by Common Paper
This Business Associate Agreement (BAA) establishes legal safeguards for protected health information shared between a Provider and a Company. It defines breach notification protocols, sets restrictions on data offshoring and de-identification, and ensures compliance with HIPAA regulations.
Updated 13 Aug 2026
Facebook Privacy Information by Mozilla
This notice explains how a company collects and uses personal data when individuals interact with its Facebook pages, apps, and advertisements. It clarifies that the company only accesses information based on user-granted permissions and highlights that public interactions like comments or photo tags remain visible on Facebook.
Updated 13 Aug 2026
Portugal
Privacy Policy (Portugal) by Seedsummit
This privacy notice is for companies in Portugal collecting and processing customer data. It outlines how personal information is handled, stored, and protected in compliance with the General Data Protection Regulation.
Updated 13 Aug 2026
US
Other Site Policies Guidelines For Legal Requests Of User Data (GitHub)
These guidelines outline how a platform handles law enforcement requests for user data, including the legal standards required for disclosure and the types of information maintained. It details the specific requirements for subpoenas, court orders, and search warrants while establishing a policy of user notification.
Updated 13 Aug 2026
Company Processors (Basecamp)
This transparency notice lists the third-party software providers used by a company to handle personal information. It identifies sub-processors located in the United States and confirms that GDPR-compliant data processing agreements are in place for each. Use it to inform users about data sharing for core services as well as marketing activities like podcasts, blogs, and virtual events.
Updated 13 Aug 2026
Content Removal Policies Github Private Information Removal Policy (GitHub)
This policy establishes the procedure for removing high-risk private information such as passwords, access tokens, and social security numbers from a platform. It outlines the specific investigation and notification steps required to process a removal request when content poses a targeted security risk.
Updated 13 Aug 2026
European Union
Privacy Policy (European Union) by Mozilla
This privacy policy governs the collection and use of personal data for proprietary software applications and web-based technologies. It outlines user account requirements, cookie usage preferences, and data sharing protocols with third-party service providers.
Updated 13 Aug 2026

Browse other categories

Cybersecurity
146 documents
Data Breaches & Incident Management
15 documents

Frequently asked questions

A template isn't binding on its own - like any contract, it becomes binding once it's properly completed and signed. Templates in our curated library are professionally drafted for US or UK law; review any template before you sign it.

Yes. Chat with GitLaw to edit any section, or make changes directly in the editor.

Yes, read about team plans here.

Describe what you need in the chat and GitLaw will draft it for you.

Templates in our curated library are professionally drafted for US or UK law. The wider library comes from the GitLaw community and public sources - a solid starting point, but check any template fits your situation before you rely on it.

Mostly US and UK law. Some templates use general commercial terms that work across jurisdictions, and many note which law they're written for.

It depends on the situation. Templates work well for routine business agreements. For anything involving significant money, complex IP, employment, or areas you're unsure about, it's worth getting professional advice before you sign. GitLaw provides templates and tools, not legal advice.

Open any template in GitLaw and describe the change you want in the chat — 'make clause 4 mutual' or 'add a 30-day notice period', for example. GitLaw drafts the revised language and shows it as a suggested edit. You accept, reject, or keep editing from there.

Yes. Upload a Word, PDF, or Markdown file and GitLaw will open it in the editor. You can review, edit, or chat with GitLaw about it the same way you would with any template from the library.

Trusted by 5,000+ businesses

Nexus logoMlabs logoTechstars logo

From template to signed, in one place

Every template opens in an editor with an AI agent alongside it.

1

Open

Pick a template and open it. Nothing to download, and no credit card to start.

Free to open

2

Edit with AI

Describe your situation in chat and the agent adapts the wording, clause by clause.

Tracked changes you can review

3

Send and sign

Share it for negotiation, then collect signatures without leaving GitLaw.

eSign included

Built for your legal work,
with practicing lawyers

Trained on 5,500+ clauses and specialist areas of law. Built with a standards committee of independent lawyers.

Adam Frankel

Adam Frankel

General Counsel · Technology & AI

15+ years as General Counsel to technology, cloud & AI companies

US

Juliana Calil

Juliana Calil

Principal Counsel · Technology & Entertainment

20+ years in-house at Google, Intel, Disney and Looker

US · BR

Adam Wardel

Adam Wardel

General Counsel, Data Privacy Officer & AI Advisor

12+ years leading legal & privacy for SaaS and AI companies

US · UK · CA · EU

John Hoffman

John Hoffman

Associate Director, Corporate Counsel · Life Sciences & Technology

20+ years in corporate counsel, incl. senior counsel at Certara

US

Richard Nohe

Richard Nohe

General Counsel · Telecom, Cloud & Data Centers

20+ years in-house, regional General Counsel at BT across 30+ countries

US

Joe Al-Khayat

Joe Al-Khayat

General Counsel · Technology & High-Growth Companies

Cross-jurisdictional M&A and SaaS contracting across the UK, US & Australia

UK · US · AU

Joshua Woo

Joshua Woo

Technology, AI & Privacy Counsel · APAC

Former Goldman Sachs Executive Director for AI, cybersecurity & privacy in APAC

SG · HK

Sahil Verma

Sahil Verma

International Business & Investment Lawyer

13+ years in business law, investment law & dispute resolution

AE

Matthew Willis

Matthew Willis

CRO & General Counsel · SaaS

Former President of the ACC's 2,200-attorney Chicago Chapter · JD + Kellogg MBA

US

Mayowa Ogunrinola

Mayowa Ogunrinola

Legal Consultant · Fintech & AI Compliance

Regulatory strategy, AI governance & data protection for fintech and AI

NG

Steven J. Shanker

Steven J. Shanker

Partner and Chair of Corporate and Employment Law

25+ years as a corporate & employment attorney in New York

US

Rebecca Babbage

Rebecca Babbage

Legal Counsel · Financial Services, Corporate & Governance

UK-qualified solicitor working in-house with regulated entities in financial services

UK

Paul J. Kuo

Paul J. Kuo

Fractional General Counsel · Fintech & Payments

Founder of Twelvestone General Counsel and Chairman of PayU's Supervisory Board

US

Ready to get started?

No sales calls, no credit card. Just chat with GitLaw.

GitLaw provides templates and tools, not legal advice. Templates are a starting point, not a substitute for advice on your situation - for anything significant, speak to a qualified lawyer.