DPA (Data Processing Agreement)

A Data Processing Agreement (DPA) is a contract required by Article 28 GDPR between you as the data controller and a service provider that processes personal data on your behalf — such as your hosting provider. It sets out the purpose, scope and duration of processing plus the technical and organizational safeguards, and ensures the processor only acts on your documented instructions. Without a valid DPA, outsourcing the processing is unlawful. That's why a DPA is a baseline part of GDPR-compliant hosting . Bthorio provides a DPA on request, with all data held solely in Frankfurt am Main — outside the reach of the US CLOUD Act.

← Back to the glossary