Data Processing Agreement

GDPR Article 28 DPA template. Review by counsel before execution.

What this is

COHESION provides a GDPR Article 28 compliant Data Processing Agreement template, adapted from the GDPR.eu community version and branded for COHESION AUTH LLC.

Download

• DPA template (Markdown source), live in the repo.

A PDF render of the same template is produced as part of the release pipeline and will be linked here once the next release tag lands (v1.1.0 tag shipped 2026-04-22, current is v1.2.0).

Schedules

1. Processing purposes.
2. Data categories (behavioral telemetry only, never prompts or model outputs).
3. Sub-processors, see subprocessors.
4. Data-subject rights.
5. Security measures, see security.
6. Audit rights.
7. SCCs for cross-border transfers.

Important flag

REVIEW BY LEGAL COUNSEL REQUIRED BEFORE EXECUTION. Template sourced from GDPR.eu community version, adapted by the COHESION team. Not legal advice.

Who to contact

[email protected] for questions or to execute an enterprise DPA.

Next step

• DPIA
• Subprocessors
• Security