Plain-English meaning
A data processing agreement sets responsibilities and instructions when one party processes personal data for another.
Why it matters in a software decision
It records operational and legal commitments that a product page or security questionnaire does not replace.
Where you may see it
Vendor legal centers, master agreements, privacy addenda, and procurement approval records.
What to verify
- Roles and processing scope
- Security and incident terms
- Subprocessor process
- Deletion, return, and transfer terms
Do not confuse it with
A privacy policy is a public notice about a party's practices; a DPA is a contract between parties. Requirements vary, so obtain qualified review.
Procurement example
The buying team should connect the DPA to the actual data inventory instead of treating signature as proof that every planned use is covered.
This glossary explains procurement usage in plain English. Contract, privacy, security, accounting, and regulatory conclusions require context-specific review.