Templates

EU-focused consent flow with explicit purpose limitation, data retention policies, right-to-deletion guarantees, and third-party sharing prohibitions. Suitable for GDPR Article 6(1)(a) lawful basis.

Define your baseline privacy requirements that apply to all counterparties. Covers data retention limits, third-party sharing prohibitions, deletion on request, and encryption requirements.

Request a copy of all personal data a service holds about you. You'll receive a structured export within 30 days.

Establish clear data handling responsibilities between a data controller and processor. Covers sub-processors, audit rights, retention, and breach notification.

License your personal data for AI and machine learning use. Specifies permitted use, compensation terms, output restrictions, and attribution requirements. Designed for the US market.

Workshop consent with recording for on-demand replay, attendee networking, and marketing

Protect sensitive information shared between two parties. Covers what's confidential, for how long, and what's excluded.

Let an AI agent evaluate and negotiate data licensing offers for you. You set the rules — the agent escalates anything outside bounds.

Offer your data on your terms and get compensated. You choose the data categories, pricing, and who qualifies.

Review a service's proposal to access your data. You can accept, reject, or propose different terms.

Stay on top of GDPR obligations with monthly checks: process pending data requests, audit retention periods, and review your breach log.

Once a year, review every active consent: check validity, plan renewals, and make sure consent language matches your current privacy policy.

License your spending patterns to a fintech for credit scoring or analysis. Data is pseudonymised, with configurable retention and subscription pricing.

GDPR Article 26 joint controller agreement defining responsibilities for co-controllers of personal data. Covers roles, DPO contacts, and data subject request handling.

General service agreement template with scope of work, service levels, payment terms, and termination clauses.

Find out what personal information a business has collected, sold, or shared about you. Businesses must respond within 45 days.

Put a policy or terms change to a group vote. Set the quorum threshold and how long voting stays open.

A parent or guardian manages a student's identity and data until they turn 18. Control automatically transitions to the student at legal age.

Ask a service to delete your personal data. You'll receive confirmation once deletion is complete.

Monthly compliance check for education records: parental consent audit for under-18 students, data retention review, and consent revocation tracking.

Employee and employer agree on data handling terms: background checks, reference sharing, and data retention after departure.

Creator and platform agree on revenue split, payment terms, data transparency, and content ownership rights.

Quarterly review of platform transparency obligations: algorithm disclosure, revenue reporting accuracy, and creator data access rights.

Monthly regulatory compliance: self-exclusion list verification, anti-money laundering checks, and player protection audits.