Getting a signed DPA

If your legal or procurement process needs a countersigned Data Processing Agreement, here is the fastest path to one.

• Key takeaways
• Standard DPA incorporates SCCs; countersigned PDFs usually return in two business days.
• Included on Scale/Enterprise; Growth reviews can request it too.
• One standard text for everyone; factual edits fine, redlines are Enterprise-only.

Who can get one

Signed DPAs are included on Scale and Enterprise. Growth customers who need one for a compliance review can request it too, we have never let paperwork block a reasonable review.

The process

1. Read the standard terms at bobray.com/pages/legal/dpa.html, they incorporate the EU Standard Contractual Clauses where relevant.
2. Email privacy@bobray.com with your legal entity name, address, and signatory.
3. We return a countersigned PDF, usually within two business days.

Redlines

We keep one standard DPA so every customer gets the same strong terms. Material redlines are considered on Enterprise; small factual edits (entity names, notice addresses) are always fine.

Common pitfalls

The mistakes we see most often on this topic, so you can skip them entirely.

• Starting procurement without reading the standard terms first, most reviews pass as-is.
• Requesting from a personal email; use your account or legal contact.
• Expecting per-customer liability rewrites on self-serve plans.

Quick reference