DPA: What It Is and How to Request

What this is

A guide to Data Processing Agreements (DPAs) for enterprise and compliance-focused customers who need formal data handling contracts.

Who this is for

- Enterprise customers - Organizations with strict compliance requirements - Legal and procurement teams evaluating SolarQuant

What you can do

- Understand what a DPA covers - Know when you need one - Request and execute a DPA with SolarQuant

What is a DPA?

A Data Processing Agreement is a legally binding contract that: - Defines how SolarQuant handles your data - Establishes security and privacy commitments - Ensures GDPR and other regulatory compliance - Specifies data breach notification procedures - Lists approved sub-processors

When you need a DPA

Required for: - Organizations subject to GDPR - Companies with enterprise compliance requirements - Situations involving EU personal data - Contracts requiring formal data handling terms

Not typically needed for: - Individual users - Small teams without compliance requirements - Testing and evaluation purposes

Steps to request a DPA

1. Upgrade to a paid plan (DPA requires active subscription) 2. Navigate to Settings → Legal 3. Click "Request DPA" 4. Provide required information: - Legal entity name - Registered address - Contact person - Specific requirements (if any) 5. We'll send the DPA within 2 business days 6. Review, sign, and return 7. We countersign and provide final copy

What the SolarQuant DPA covers

- Data categories processed - Processing purposes and legal basis - Security measures (encryption, access controls) - Sub-processor list and approval process - Data breach notification (72-hour window) - Data deletion upon contract termination - Audit rights

Rules / limits

- DPA required before enterprise features unlock (SSO, API, webhooks) - Changes to standard DPA require legal review - Sub-processor list updated quarterly

Common mistakes

- Requesting DPA before paid subscription - Expecting instant turnaround (allow 2 business days) - Not involving your legal team in review

Related links

- Security Statement - Privacy Policy - Sub-Processors Registry