dpa-review

To review a Data Processing Agreement, you upload or paste the DPA text and request a review against your internal playbook. The Skill detects whether you are the processor or controller and applies the corresponding playbook rules to generate a structured review memo with redlines.

Yes, you can generate redlines for subprocessor controls and international transfers. The Skill performs term-by-term clause checking across core DPA terms and outputs consolidated redlines aligned with your playbook's risk framing.

The best way to check if a DPA matches your privacy policy obligations is to use the privacy policy consistency validation feature. It automatically flags mismatches between the DPA commitments and your privacy policy during the review process.

Yes, the DPA review output works for attorney negotiation preparation. It produces an attorney-oriented structured memo containing an issues summary, term-by-term findings, consolidated redlines, and an escalation-ready next-steps decision tree.

When direction ambiguity occurs during a DPA review, the Skill stops to request clarification on whether you are acting as the processor or controller. This ensures the correct half of the internal DPA playbook is applied before proceeding with the analysis.

A key limitation is that the Skill includes safety guardrails that stop the review to request clarification when research coverage is thin. It also requires source attribution guidance for legal citations to ensure verification of the analysis.