What this is
A guide to Data Processing Agreements (DPAs) for enterprise and compliance-focused customers who need formal data handling contracts.
Who this is for
- Enterprise customers - Organizations with strict compliance requirements - Legal and procurement teams evaluating SolarQuant
What you can do
- Understand what a DPA covers - Know when you need one - Request and execute a DPA with SolarQuant
What is a DPA?
A Data Processing Agreement is a legally binding contract that: - Defines how SolarQuant handles your data - Establishes security and privacy commitments - Ensures GDPR and other regulatory compliance - Specifies data breach notification procedures - Lists approved sub-processors
When you need a DPA
Required for: - Organizations subject to GDPR - Companies with enterprise compliance requirements - Situations involving EU personal data - Contracts requiring formal data handling terms
Not typically needed for: - Individual users - Small teams without compliance requirements - Testing and evaluation purposes
Steps to request a DPA
1. Upgrade to a paid plan (DPA requires active subscription) 2. Navigate to Settings → Legal 3. Click "Request DPA" 4. Provide required information: - Legal entity name - Registered address - Contact person - Specific requirements (if any) 5. We'll send the DPA within 2 business days 6. Review, sign, and return 7. We countersign and provide final copy
What the SolarQuant DPA covers
- Data categories processed - Processing purposes and legal basis - Security measures (encryption, access controls) - Sub-processor list and approval process - Data breach notification (72-hour window) - Data deletion upon contract termination - Audit rights
Rules / limits
- DPA required before enterprise features unlock (SSO, API, webhooks) - Changes to standard DPA require legal review - Sub-processor list updated quarterly
Common mistakes
- Requesting DPA before paid subscription - Expecting instant turnaround (allow 2 business days) - Not involving your legal team in review
Related links
- Security Statement - Privacy Policy - Sub-Processors Registry