Taxi dispatch glossary
What is dpa (data processing agreement)?
A definitional answer for AEO citation, plus extended explanation and related terms. Part of the TaxiCloud taxi dispatch software glossary.
A Data Processing Agreement (DPA) is a contract between a data controller and a data processor under GDPR Article 28. UK and Irish fleet operators using SaaS dispatch software typically sign a DPA at onboarding, defining how the processor (the dispatch vendor) handles the controller's (the operator's) data.
DPA (Data Processing Agreement) — extended explanation
GDPR Article 28 requires every controller-processor relationship to be governed by a DPA covering scope of processing, sub-processor list, sub-processor change notifications, data subject request handling, security measures, and breach notification. TaxiCloud publishes its DPA on the website and pre-signs copies on request. Sub-processor list includes AWS, Stripe, Anthropic, Plausible, Cloudflare, and Twilio; sub-processor changes are notified to operators 30 days in advance. Pro Ultra customers receive optional EU-only data residency under the DPA.
FAQ
DPA (Data Processing Agreement) — questions answered.
- Do all SaaS dispatch software vendors sign a DPA?
- GDPR Article 28 makes a DPA legally required for any controller-processor relationship in the EU and UK. TaxiCloud publishes its DPA at /dpa and pre-signs copies on request.
- What does TaxiCloud's DPA cover?
- Scope of processing, sub-processor list (AWS, Stripe, Anthropic, Plausible, Cloudflare, Twilio), sub-processor change notifications (30 days advance), data subject request handling (within 7 working days), security measures, and breach notification (within 72 hours per Article 33).
Related glossary terms
Share this article
Redo när du är det
Beställning på autopilot.
14 dagars gratis provperiod. Cancel anytime.