DPA availability
TAPPHIRE can provide or review a Data Processing Addendum where required for an applicable employer, client, partner, or product relationship.
What a DPA may cover
A Data Processing Addendum may define:
Roles of the parties
Processing purpose
Categories of personal data
Categories of data subjects
Processing instructions
Confidentiality obligations
Security measures
Subprocessor use
Data subject request support
Incident notification process
Retention, return, or deletion
Cross-border transfer terms where applicable
Audit and review process
Governing agreement hierarchy
Website use
Using the public website or submitting a request access form does not by itself create a data processing relationship or Data Processing Addendum.
Requesting DPA review
Employers, partners, procurement reviewers, or trust reviewers can request DPA review through the Request Access path.