A data processing addendum your customers can sign

Data processing addendums for B2B SaaS. Cover GDPR Article 28 for EU customers, CCPA service provider terms, sub-processors and security.

From $500Drafted individually by an independent California attorney, not a template.

Your first contract is free (up to $500)

One contract drafted or reviewed at no cost for new startups, by an independent California attorney.

See packages

Clear responsibilities for customer data

A data processing addendum (DPA) sets out how your SaaS product handles personal data on behalf of your customers. Larger and EU customers often ask for one before they sign. It covers the GDPR Article 28 terms for EU customers, service provider or contractor terms under the CCPA, your sub-processors, security measures and what happens to the data when the contract ends. A template is a useful starting point, but the DPA has to match your product and your vendors. Foundkits helps you get a DPA that fits your setup, with packages from $500.

Choose your data processing addendum

A DPA for your SaaS product, with extra support for more complex data flows or customer negotiations.

DPA

For a straightforward B2B SaaS setup:

$500

per agreement

  • Call about your product, your role and the personal data you process for customers
  • Drafting of one DPA with processing instructions, data categories and the GDPR Article 28 terms
  • CCPA service provider and contractor terms
  • Security measures, breach notification, sub-processor terms, audit rights and data return or deletion
  • One round of changes after your feedback and a final call
Request this DPA

Prefer to talk first? Free 15-min call

DPA Plus

Everything in DPA, plus:

$1,000

per agreement

  • Review of a longer sub-processor chain and the terms that flow down to it
  • International transfer terms, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework
  • Alignment with your SaaS agreement or MSA
  • One additional round of changes
  • Up to two negotiation rounds and one call with your customer or vendor
Request this DPA

Prefer to talk first? Free 15-min call

A clear next step.

Tell us about your product, the personal data you process for customers and the sub-processors you use. Share any DPA a customer has sent you. The attorney confirms the scope, fixed fee and delivery date before work starts.

  1. Describe your request. Attach a document if you have one.

  2. You get the scope, fixed fee and delivery date by email.

  3. An independent California attorney starts once you agree.

  • First contract free
  • Fixed prices after that
  • Reply within 1 business day