dpa-review

To review a data processing agreement (DPA), you load your privacy playbook into the local CLAUDE.md configuration, then the skill analyzes the DPA term-by-term to detect your role as processor or controller and generates a redline-ready memo with targeted corrections.

Yes, DPA redlining is automated by checking specific clauses such as subprocessor changes and breach notice timing against your configured playbook, then outputting consolidated recommended redlines and fallback guidance for negotiation.

Processor review mode evaluates a customer's DPA sent to you, while controller review mode evaluates a DPA you send to a vendor. The skill detects your role and applies the correct half of your privacy playbook for accurate clause expectations.

Checking DPA consistency involves flagging conflicts between what the DPA promises and what your privacy policy commits to. The skill performs a privacy policy consistency check alongside international transfer and deletion clause analysis.

Before running DPA clause analysis, you need your organization's privacy playbook loaded into the local CLAUDE.md configuration file. This provides the clause expectations for roles, scope, security, audit rights, and liability that the skill enforces.

Yes, DPA review enforces safety gates for signing decisions by generating a structured memo with a clear bottom line, issue ratings, and escalation guidance, ensuring risky terms are flagged before any agreement is finalized.