dpa-review

Data Processing Agreement redlining evaluates DPA clauses against a privacy playbook to generate negotiation-ready risk redlines. It scans subprocessor, security, breach notification, audit, and international transfer terms using direction detection for processor or controller posture.

Yes, role-aware DPA review detects whether you received a customer-issued or vendor-issued contract and applies the matching processor or controller playbook rules. This direction detection ensures protective scrutiny or defensive positioning aligns with your actual compliance posture.

Performing a privacy policy consistency check during DPA review compares the contract's data processing terms against your stated privacy policies. The analysis produces a structured memo with prioritized issues, recommended redlines, and escalation guidance for insufficient fallback positions.

Yes, you must load a configured CLAUDE.md privacy playbook to evaluate Data Processing Agreement terms. The playbook provides the rule set for term-by-term clause analysis across subprocessors, security measures, breach notification, deletion, and liability.

A DPA risk review checks subprocessors, security measures, breach notification, audit rights, international transfers, deletion and return of data, and liability clauses. Each term is evaluated against the configured playbook and primary-law floors to generate prioritized, negotiation-ready redlines.

Data Processing Agreement review flags fallback positions when recommended redlines for clauses like international transfers fall below primary-law GDPR floors. The analysis includes escalation guidance to ensure your contract negotiation maintains required data protection standards.