Skip to main content
Mizu CRM

Data Processing Agreement engineering package ready · pending counsel sign-off

Package 2026.08.22-fix11 · Proposed effective date 2026-09-01 · PDF · Counsel review package

Legal

Data Processing Agreement

Our GDPR Article 28 DPA draft is available for download. It covers processor obligations under GDPR Art. 28; final counsel-approved wording is tracked via the banner above.

Available now · No NDA required

Mizu CRM Data Processing Agreement

PDF · GDPR Art. 28 draft for counsel · Engineering update Aug 2026 · Auth: Supabase

What the DPA covers

Our DPA satisfies all requirements of GDPR Article 28(3). Here is each clause and what it means.

Art. 28(3)(a)Processing only on documented instructions from the controller
Art. 28(3)(b)Confidentiality obligations on all persons authorized to process data
Art. 28(3)(c)Technical and organizational security measures under Art. 32
Art. 28(3)(d)Subprocessor engagement rules and notification obligations
Art. 28(3)(e)Assistance with data subject rights requests
Art. 28(3)(f)Assistance with Art. 32-36 obligations (security, DPIA, breach notification)
Art. 28(3)(g)Data deletion or return at end of contract
Art. 28(3)(h)Audit rights and information provision

How to sign

  1. 1

    Download the current DPA PDF below (engineering draft aligned to GDPR Art. 28 counsel sign-off pending)

  2. 2

    Sign using DocuSign, Adobe Sign, or wet signature

  3. 3

    Email the signed copy to legal@mizucrm.com

  4. 4

    We countersign and return your executed copy within 1 business day after counsel approval

Executed copies returned within 1 business day · legal@mizucrm.com

Related documents

GDPR program

GDPR support overview, data subject rights, and retention policies

Trust Center

Subprocessors, data residency, and AI data use policy

Privacy Policy

How we collect, use, and protect personal data

    Data Processing Agreement Mizu CRM