IP, WEBSITE & DATA

Data Processing Agreement (DPDP Act, Fiduciary–Processor)

Sign with any vendor that stores or handles your customers' or employees' personal data, such as SaaS tools, cloud hosting, payroll processors, logistics or tele-calling agencies. You remain responsible for what they do with the data, so this agreement is how you control it.

Saved letters

Nothing saved yet

Use Save to keep a named copy of this letter, for example one per employee.

Fill in the details

5 of 13 required fields filled

8 required fields still empty — shown highlighted in the letter.

Data Fiduciary (your business) *

First party entity type

First party registered address *

First party signatory & designation *

Data Processor (vendor) *

Second party entity type

Second party address *

Second party signatory & designation *

Services provided by the vendor *

Main agreement / order reference

Whose data *

Categories of personal data *

Breach notification to you (hours) *

Prior notice for new sub-processors (days)

Return / deletion after termination (days)

Where data will be stored

Courts / seat of arbitration (city) *

Place *

Date *

Laws this relies on

Digital Personal Data Protection Act, 2023 · Section 8(2)A Data Fiduciary may engage a Data Processor only under a valid contract and remains responsible for the processing.
Digital Personal Data Protection Act, 2023 · Section 8Reasonable security safeguards, breach intimation to the Board and affected persons, and erasure when the purpose is served.
Information Technology Act, 2000 · Section 43AWith the SPDI Rules, 2011, governs reasonable security practices until the DPDP obligations commence.

How to execute

Print on non-judicial stamp paper of the value your state requires (or e-stamp), then sign with witnesses.

Print on non-judicial stamp paper (or e-stamp) as per your state's stamp law, or attach it as a schedule to the main services agreement. The DPDP Rules, 2025 were notified in November 2025 with phased commencement; most substantive obligations apply after an 18-month transition. Until they apply, Section 43A of the IT Act, 2000 and the SPDI Rules, 2011 continue to govern — check the current commencement status before publishing.

Click anywhere in the letter to edit it. Changes to the form keep flowing in.

This is a general template, not legal advice. Laws, stamp duty and procedures vary by state and change over time — have a qualified advocate review it for your facts before signing or sending.