Vendor DPA review checklist (template)

Before a new vendor becomes your subprocessor, their DPA should clear a consistent bar. This checklist covers sub-processing terms, international transfer mechanisms, security measures, breach-notification timelines, audit rights, and deletion on termination.

Use it as a manual gate, or let the DPA analyser score vendors against the same criteria automatically.

This is placeholder content. Attach the downloadable checklist before launch.