# Data Processing Addendum

## What is a Data Processing Addendum (DPA)?

A Data Processing Addendum is a key document that the EU's GDPR
regulation requires. The GDPR compliance requires data controllers
to sign a data processing agreement with any parties that act as
data processors on their behalf. These requirements are laid out in
Article 28(3) and (4) of Regulation (EU) 2016/679 and/or
Article 29(3) and (4) of Regulation (EU) 2018/1725.

In the case of the Exoscale Cloud Platform, Exoscale may act
as a processor depending on what data you as an Exoscale IaaS and PaaS
user are processing on the platform, in which case you
act as a controller of the data.

## How to review our Data Processing Addendum (DPA)

You can find our [DPA template](https://www.exoscale.com/dpa/) which complements
our Terms and Conditions.

Login to the [Portal](https://portal.exoscale.com/organization/legal) and select
 `Organization` in the main navigation on the left. You can find information
 under the Legal section.

![](organization-menu-legal.png "Organization menu: Legal")

Here you find our **Data Processing Addendum** (or DPA) at the bottom:

![](organization-legal-dpa.png "Review DPA")

click on `Review and Accept`. A window with the DPA will appear for you to review. You can click on `Confirm` to accept.

![](dpa-window.png "DPA Window")

The DPA is now signed with a timestamp and archived. You can download a PDF copy for your records.