What problem does it solve? Reviewing a Data Processing Agreement term-by-term is slow and error-prone, and the right negotiating position flips depending on whether you are the processor or the controller. This Skill walks a DPA clause by clause against your configured playbook, detects your role automatically, and produces a review memo with surgical redlines. ## Core Features & Use Cases - Direction-aware review: Auto-detects whether you are the processor (customer's DPA) or controller (vendor's DPA) and applies the correct half of the playbook. - Term-by-term analysis: Checks roles, subprocessors, security measures, breach notification, audit rights, international transfers, deletion, and liability against playbook positions and regulatory floors. - Federal sectoral overlay: Flags GLBA, HIPAA, FERPA, COPPA, and other sectoral regimes that a generic GDPR-style review would miss. - Use Case: A customer sends their DPA attached to an MSA. Run the review to get a memo rating each issue 🟢🟡🟠🔴, consolidated redlines, fallback positions, and a privacy-policy consistency check. ## Quick Start Review the attached customer DPA against our playbook and produce a redline memo.
