Free Data Governance Templates

This Privacy Policy outlines how 37signals LLC collects, uses, secures, and discloses user data across its various products like Basecamp and HEY. It details the types of information gathered, user rights regarding their data, and practices concerning data retention and international transfers. The policy emphasizes that user data is never sold and explains the company's approach to legal requests for information.

This Consultancy Agreement template outlines the terms and conditions for an independent consultant providing advisory services to a company. It covers key aspects such as the scope of activity, rights and responsibilities, compensation, confidentiality, non-solicitation, intellectual property, and data protection. The template clarifies that the consultant is not an employee and provides optional clauses for defining project specifics and equity compensation.

This Data Protection Policy outlines a company's commitment to safeguarding personal data and respecting individual privacy rights. It details how personal data is collected, processed, stored, and managed in compliance with various data protection laws, including GDPR, CCPA, PDPA, and Australia's Privacy Act. The policy also defines responsibilities for employees, contractors, and the Data Protection Officer, and outlines data subject rights.

This document outlines an Anti-Spam Policy for a company, defining what constitutes spam and prohibiting the transmission of unsolicited commercial messages. It details the policy's scope, reporting procedures for violations, and the consequences for non-compliance, which include account termination. The policy also covers advertisements in message boards and newsgroups.

This document outlines the process for managing a HEY for You account when the account owner is incapacitated or has died. It provides instructions for canceling billing, exporting data, or cancelling the account, depending on whether the requester has login credentials or legal authority. The process involves submitting specific legal documents for verification by HEY's support team.

This document is a Data Processing Agreement (DPA) designed to supplement an underlying agreement between a Customer and a Provider. It outlines the terms for processing personal data, defining roles such as Controller, Processor, and Subprocessor. The DPA details obligations related to data security, international data transfers under various regulations (e.g., GDPR, UK GDPR, CCPA), and incident response, incorporating standard terms from Common Paper DPA Standard Terms Version 1.1.

This document outlines GitHub's policy regarding active malware and exploits on its platform. It clarifies that using GitHub for unlawful attacks is prohibited, while also supporting the publication of dual-use content for security research. The policy details conditions under which content might be restricted and provides an appeals process for users.

This document outlines GitHub's authorized third-party subprocessors and internal subsidiaries that process customer and personal data for its Enterprise services. It details the types of processing performed and the locations involved. The list also explains GitHub's notification policy for new subprocessors and provides contact information for inquiries related to data processing under the GitHub Data Protection Agreement.

This document details the specific terms and conditions for various additional products and features offered by GitHub, such as Actions, Codespaces, and GitHub Copilot. These terms supplement the main GitHub Agreement and cover aspects like acceptable use, billing, data handling, and licensing for each feature. It ensures users understand the rules for using these specialized tools within the GitHub ecosystem.

This agreement outlines the terms and conditions for developers to participate in the GitHub Marketplace, enabling them to list and distribute their software applications to end users. It details the responsibilities of developers, including data privacy, intellectual property, and payment processing for paid products, while also defining GitHub's operational role and rights within the marketplace.