A data processing agreement (DPA) is a contract with a supplier that handles personal data on your behalf. It sets out what the supplier may do with that data and how it must be protected.
Data residency is the requirement or decision to store and process data in a specific country or region. It is driven by law, regulation, contracts or customer expectations, and shapes how cloud and AI systems are deployed.
The GDPR (General Data Protection Regulation) is the EU law governing how organisations collect, use, store and share personal data about people in the EU. It sets duties for businesses and gives individuals enforceable rights.
HIPAA (Health Insurance Portability and Accountability Act) is a US law protecting the privacy and security of health information. It applies to healthcare organisations and the businesses that handle that data for them.
A master services agreement (MSA) is a framework contract setting the general legal and commercial terms between a client and a provider. Individual projects are then added through shorter statements of work.
A non-disclosure agreement (NDA) is a contract in which one or both parties agree to keep specified information confidential. The information may be used only for an agreed purpose, such as evaluating a partnership or a hire.
A clear proven process, that delivers
You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.