Data Processing Agreement
What Kwill's DPA covers, who may need one, and how to request a signed copy for your procurement or privacy review.
What the DPA Covers
The agreement addresses how personal data is handled when you use Kwill as part of your business.
Processing of personal data
The DPA sets out how personal data is processed when you use Kwill and the purposes for which it may be processed.
Customer instructions
The DPA confirms that Kwill processes personal data on your documented instructions, as part of providing the service.
Security obligations
The DPA includes Kwill's security commitments — including encryption in transit and at rest — to protect personal data.
Confidentiality
The DPA covers confidentiality obligations for anyone who accesses personal data on Kwill's behalf.
Subprocessors
The DPA addresses the use of subprocessors and how you are kept informed of changes to them.
Data subject rights
The DPA explains how requests from data subjects — such as access or deletion requests — are handled.
Data deletion / return
The DPA covers what happens to personal data at the end of the engagement, including deletion or return.
Who Needs a DPA?
A Data Processing Agreement is typically requested by business and enterprise customers whose own privacy or procurement reviews require one — for example, if you process personal data of your own clients in Kwill and need to document how that data is handled.
If your review requires a signed DPA, request one below and our team will confirm the applicable terms with you.
Request a DPA
Tell us a little about your business and we'll follow up with the next steps.