Templates

Establish clear data handling responsibilities between a data controller and processor. Covers sub-processors, audit rights, retention, and breach notification.

Protect sensitive information shared between two parties. Covers what's confidential, for how long, and what's excluded.

GDPR Article 26 joint controller agreement defining responsibilities for co-controllers of personal data. Covers roles, DPO contacts, and data subject request handling.

General service agreement template with scope of work, service levels, payment terms, and termination clauses.

Put a policy or terms change to a group vote. Set the quorum threshold and how long voting stays open.

Employee and employer agree on data handling terms: background checks, reference sharing, and data retention after departure.

Creator and platform agree on revenue split, payment terms, data transparency, and content ownership rights.

Hospitals form a network for continuity of care. Equal governance, minimum necessary disclosure, and 90-day withdrawal notice.

Two financial services agree on data sharing, API availability, rate limits, and data retention obligations.

Negotiate data licensing terms through counter-offers: price, duration, purposes, and retention. Up to 10 rounds before the deal expires.

Gaming studios collaborate on shared player data standards. Majority vote on policy changes with a 14-day voting window.

Define data handling responsibilities between controller and processor.

A deal committee votes on data transfer terms before an acquisition closes. Requires a super-majority (5 of 6) within a 30-day window.

Standard bilateral NDA for protecting confidential information exchanged between two parties. Includes mutual obligations, exclusions, and term limits.

Bilateral agreement for structured data sharing between organizations. Covers data categories, retention, security requirements, and purpose limitations.

Agree on data availability, response times, and what happens when things go wrong. Both parties sign the same terms.

Multiple organisations share control of the same data. Equal voting rights, shared responsibilities, and clear withdrawal terms.

Two universities share research data under peer governance. Either party can withdraw with 30-day notice. IRB approval required.

A group of retailers collaborates on shared privacy standards. Policy changes require a 3-of-5 quorum vote with a 14-day voting window.

Two entertainment services agree on content data sharing, API availability, and user experience standards.

Gambling operator and regulator agree on data sharing, player protection measures, and reporting obligations.

Multi-party research consent requiring approval from researcher, IRB, school, and parent/student. Includes GDPR Art. 89 research exemption disclosures and structured researcher metadata fields.

Independent-contractor engagement with scope of work, fixed compensation, and due date.

Principal, interest, repayment term, and default conditions between two individuals.