TC.03Data Processing Agreement
GDPR Article 28 terms, pre-signed by counsel.
Standard controller-to-processor agreement. EU SCCs (2021/914) annexed for restricted transfers; UK IDTA addendum for UK-bound data flows. Countersign and return — no side-letter required for the standard track.
Standard track
Most institutional buyers use the standard DPA shell with the EU SCCs and (for UK flows) the IDTA addendum. The shell is countersigned by FlyttGo counsel; the buyer countersigns and returns a single PDF. Bound to the parent MSA on execution.
Custom DPA terms negotiated case-by-case during the scoping engagement (SE.D2). Material edits to the standard shell may affect the deployment timeline; the counsel desk flags any impact during scoping.