Data protection & law
Data Processing Agreement (DPA)
Data processing exists when a service provider processes personal data on behalf of a company. The GDPR requires a written contract for this, the Data Processing Agreement (DPA).
Also known as: AVV · AV-Vertrag · Auftragsverarbeitungsvertrag
Last reviewed on September 16, 2026
What exactly does Data Processing Agreement (DPA) mean?
For AI applications, this is the key point: as soon as an external service processes customer data, call recordings, or documents, a DPA is required, along with clarity about where the processing takes place and whether data is transferred to third countries.
That is why the question of the hosting location is not a formality, but determines how extensive the legal framework becomes.
Related terms
A 30-minute conversation, free of charge.
A 30-minute consultation, free of charge. We’ll take a look at your processes and give you our honest opinion on whether automation is worthwhile.