Vendors and transfers
Data processing agreements, the tools that handle your customers’ data and transfers outside the EEA.
Vendors and transfersVendor privacy due diligence: a 12-point checklist before you signA 12-point checklist for checking any tool before it touches personal data: role, DPA, sub-processors, data location, security, breach timing, deletion, audits, AI use and cookies.30 October 2026 · 9 min readVendors and transfersInternational data transfers: SCCs and the EU-US Data Privacy FrameworkHow to transfer personal data outside the EEA under the GDPR, from adequacy decisions to Standard Contractual Clauses and the EU-US Data Privacy Framework, and how to check your vendors.27 October 2026 · 5 min readVendors and transfersData processing agreement (DPA): when you need one and what it must containWhat a GDPR data processing agreement is, when Article 28 requires one, the eight things it must say, and how to handle the standard DPAs offered by vendors and the ones you owe your clients.15 October 2026 · 5 min read