A DPA starts with a real processor.

The public sample uses fictional, browser-local material and does not offer connected customer processing. This page does not offer, execute, or substitute for a data processing addendum.

Required agreement contents

• Controller and processor identities, instructions, data categories, affected people, and processing purposes.
• Security measures, confidentiality, service partners, regions, transfer mechanism, audit rights, and breach-notification process.
• Retention, return/deletion timing, connected-account and media-service handling, and verified request contacts.

What changes before connected workspaces

Storycairn must name the legal operator, disclose service partners and retention rules, and provide an approved agreement through a verified channel. Until then, the only supported evaluation material is fictional sample content.