Data Processing Agreement
Last updated May 2026
This Data Processing Agreement (“DPA”) template forms part of the agreement between Good Local Gov (“Processor”) and the customer organization (“Controller”) for Enterprise engagements. A countersigned DPA is available as part of Enterprise contracting.
1. Roles
The Controller determines the purposes and means of processing Customer Content. The Processor processes Customer Content only on documented instructions from the Controller.
2. Scope of processing
Processing is limited to providing the Service: hosting SOP content, generating AI drafts, summaries, and exports, and supporting the Controller.
3. Subprocessors
The Controller authorizes the subprocessors listed on our trust page. We will give notice of new subprocessors and an opportunity to object.
4. Security
The Processor maintains technical and organizational measures including encryption in transit and at rest, row-level security, access controls, and regular backups.
5. Data subject requests and breach notification
The Processor will assist the Controller with data subject requests and will notify the Controller without undue delay after becoming aware of a personal data breach.
6. Return and deletion
On termination, the Processor will return or delete Customer Content at the Controller’s choice, subject to a reasonable export window.
7. Contact
legal@oneplacegov.com