DPA Guide

Use this article as a simple guide to the DPA.

The official legal text is Data Processing Addendum.

The DPA is for a Company customer that needs processor terms for personal data handled through WorkStudio. It explains instructions, confidentiality, security, subprocessors, international transfers, assistance, deletion, and compliance support when WorkStudio acts as processor for that customer.

In Admin > Manage Access, the platform owner can require DPA acceptance when assigning a Company Owner/Admin role. That option is Company-only; it is not used for Personal, Team / Family, Coordination, or Project assignments. The invitation and DPA remain separate. Accepting the Company invitation does not silently accept the DPA and does not activate that affected Company role. The invited user must open My Account > Approvals, read the DPA, confirm that they are authorized to bind the customer, and personally select Accept DPA. Until then, a persistent notice remains visible and Company access stays blocked.

The recorded electronic acceptance is the written authorization: it stores the accepting account, authority confirmation, DPA version/hash, immutable accepted copy, subprocessor-register version, timestamp, and technical evidence. No separate paper signature is required by this platform flow. After acceptance, Approvals shows one Accepted copy link that opens the immutable English DPA snapshot retained for that acceptance.

Most ordinary individual users do not need the DPA. A Company customer should review it together with the Privacy Policy and Terms of Service.

Related: Privacy Policy Guide, Terms of Service Guide, Invitation Messages and Approvals, Legal Notice Guide.

Legal information: This article provides general information, not legal advice. For important decisions, check the current law and consult a qualified lawyer in the relevant jurisdiction. Project-specific technical requirements should also be checked with the responsible professionals.