Version 1, published 21 Oct 2026 · draft, legal review required

Data Processing Agreement (structure)

DRAFT — LEGAL REVIEW REQUIRED. This template was written to describe how ClipForge works. It has not been reviewed by a lawyer and is not legal advice. The operator must have it reviewed for their jurisdiction before publishing it.

Version 1 — template.

Structure for a DPA between the operator (processor) and a business customer (controller). Counsel must complete it.

1. Subject matter, duration, nature and purpose of processing. 2. Types of personal data (account data, media of people, voice, consent records) and categories of data subjects. 3. Processor obligations: instructions, confidentiality, security measures (link to SECURITY.md), sub-processors and notice of changes, assistance with data subject requests, breach notification within [x] hours, deletion or return at the end, audits. 4. International transfers and safeguards. 5. List of sub-processors (hosting, storage, AI providers, payment, e-mail).