Data Processing Addendum

This Data Processing Addendum (“DPA”) forms part of the Terms of Service - Subscription Agreement (the “Agreement”) entered into by and between Customer and Drata Inc., pursuant to which Customer has purchased a subscription to Drata’s software-as-a-service (“Services”, as described at www.drata.com).

The purpose of this DPA is to reflect the Parties’ agreement with regard to the Processing of Personal Data, in accordance with the requirements of Applicable Data Protection Law. All capitalized terms not defined herein shall have the meaning set forth in the Agreement or the DPA, as applicable.

In the course of providing the Services to Customer pursuant to the Agreement, Drata may Process Personal Data on behalf of Customer and the Parties agree to comply with the following provisions with respect to any Personal Data, each acting reasonably and in good faith.

Please follow the instructions below to first review and then electronically sign the DPA.

How to Execute This DPA

Review & Sign

  • To begin click here and complete the required fields and click on ‘Submit’.  Please note that you are not signing anything at this stage, simply providing contact info to receive a copy of the DPA to review and execute.

  • You will then receive an email from ‘Drata Inc. via Docusign’ with a link to the DPA document for viewing and e-signature. If you do not receive an email, please check your spam folders.

  • If you are not the authorized signatory, you are able to ‘Assign to Someone Else’ in the ‘Other Options’ drop-down menu in the bottom right hand corner of the welcome window message.

  • If you are the authorized signatory then complete the required fields in the DPA and click ‘Finish’ to finalize the signature process.

Once complete(d), you will receive an email from ‘Drata Inc. via Docusign’ with a digital copy of the DPA signature packet

Option to Download to Review Prior to Signing You have the option to download the DPA for review prior to completing the execution process. Once in review, after clicking ‘Continue’ simply click on the ‘Download’ icon located on the upper right side of the DocuSign screen.

File Copy After Execution Additional information about our privacy and information security practices can be found in Drata’s Trust Center, please visit: https://trust.drata.com/.

Should you have any questions, please contact [email protected].