Data Protection Addendum (DPA) by Bonterms
Updated 10 November 2025
This Data Protection Addendum (DPA) outlines the responsibilities of a service provider (Processor) when handling customer personal data on behalf of a customer (Controller). It ensures compliance with various data protection laws, including GDPR, CCPA, UK GDPR, and FADP. The DPA covers critical aspects such as data security, subprocessing, data subject requests, and cross-border data transfers.
Bonterms Data Protection Addendum (DPA) (Version 1.0)
DPA Setup Page
By executing this DPA Setup Page, Customer and Provider enter into the Bonterms Data Protection Addendum (DPA) (Version 1.0) (available at https://bonterms.com/forms/data-protection-addendum-v1/) by this reference. A reference copy may be attached. The DPA includes the contents of this DPA Setup Page, including the Key Terms, Schedules and any Additional Terms set forth below. Capitalized terms not defined in this DPA Setup Page have the meanings given in the Bonterms Data Protection Addendum.
Key Terms | |
Agreement | This DPA is an Attachment to the Agreement between Customer and Provider identified below: |
[include name and date of agreement between customer and provider to which this dpa becomes an attachment] | |
DPA Effective Date | [fill in date] |
Subprocessor List | [attach or link to location of provider’s subprocessor list and specify method of notification of changes (or state “none”)] |
Schedules (attach) | |
The following Schedules are incorporated into this DPA: | |
Schedule 1: Subject Matter and Details of Processing | |
Schedule 2: Technical and Organizational Measures | |
Schedule 3: Cross-Border Transfer Mechanisms | |
Schedule 4: Region-Specific Terms | |
Additional Terms | |
The following additions to or modifications of the Bonterms Data Protection Addendum are agreed by the parties and control in the event of any conflicts: | |
Signatures | |
Agreed to as of the DPA Effective Date by each party’s authorized representative: | |
Customer: Name and Title: [customer name], [customer title] Company: [customer company] Date: | Provider: Name and Title: [provider name], [provider title] Company: [provider company] Date: |
About this template
What is this template?
Data Protection Addendum (DPA) by Bonterms is a free, ready-to-use Data Governance template you can open, customize, and download on GitLaw. It gives you a professionally structured starting point, so you never have to draft from a blank page. The wording is plain and modern, organized into clear sections that are easy to read, edit, and adapt to your own situation before you share or sign it.
When should you use it?
Reach for this Data Governance template whenever you need a reliable agreement quickly and want to be sure the essentials are covered. It suits individuals, freelancers, startups, and established businesses alike. Instead of paying for a document drafted from scratch, you can start here, tailor the details to your arrangement, and have a polished draft ready in minutes. This version is drafted with California (US), England & Wales, United States of America, and General in mind, though you should always review the final wording against the laws that apply to you.
What's typically included?
A well-drafted Data Governance usually sets out the parties involved, the scope of the agreement, and each side's rights and responsibilities. Expect sections covering key terms and definitions, how long the agreement lasts, how it can be ended, and what happens if something goes wrong. This template brings those building blocks together in a sensible order, so you can focus on the specifics rather than worrying about what to include. Open it to read the full document, then sign up to edit, negotiate, and e-sign it directly in GitLaw.