Joint Controller Agreement – Document Builder 👷♂️ Please enable JavaScript in your browser to complete this form.Please enable JavaScript in your browser to complete this form.🌍 Jurisdiction & Basics 🌍 Jurisdiction & Basics Country, language, and the governing region for this agreement. Country *Select your countryUnited StatesAustraliaBrazilCanadaChinaFranceGermanyIndiaItalyJapanMexicoNetherlandsNew ZealandNigeriaRussiaSingaporeSouth AfricaSouth KoreaSpainUnited Arab EmiratesUnited KingdomLanguage of the completed document *Select languageEnglishAfrikaansArabicDutchFrenchGermanHindiItalianJapaneseKoreanMandarin ChineseRussianSpanishZuluGoverning Region (state/province/city if applicable) *Effective Date *Short description of the joint processing (in plain language) *Generator PromptDocument TypeSource URL👥 Controllers & Contacts 👥 Controllers & Contacts Legal names, registered details, and contact points for each joint controller. Controller A – Legal Name / Company *Controller A – Registration / Company No. (if any)Controller A – Address *Controller A – Contact Email *Controller A – Contact Person / DepartmentController B – Legal Name / Company *Controller B – Registration / Company No. (if any)Controller B – Address *Controller B – Contact Email *Controller B – Contact Person / DepartmentAre there additional joint controllers? *SelectNo (only A and B)Yes (add details below)Additional Controller(s) details (name, address, email)🧾 Data, Purposes & Data Subjects 🧾 Data, Purposes & Data Subjects What data is processed, why, and whose data it is. Categories of personal data (select all that apply) *Identity/contact detailsAccount credentialsPayment/billing dataUsage/telemetry dataLocation dataMarketing preferencesSpecial category data (health/biometrics/etc.)Children’s dataOtherIf 'Other', describeData subjects (select all that apply) *Customers / usersEmployees / contractorsProspects / leadsSuppliers / vendorsMembers / subscribersOtherIf 'Other', describeJoint purposes of processing *Legal bases relied on (GDPR) (if known)Does the arrangement involve special category data or criminal data? *SelectNoYesSpecial handling requirements / safeguards⚖️ Art.26 Allocation of Responsibilities ⚖️ Art.26 Allocation of Responsibilities Who does what (transparency, DSARs, security, breach notices, etc.). Who provides the primary privacy notice to data subjects? *SelectController AController BJoint / bothOther (specify)If 'Other', specifyPrimary contact point for data subject requests (DSARs) *SelectController AController BJoint portal / shared inboxOther (specify)DSAR contact details / URL *Who verifies identity and coordinates DSAR responses? *SelectController AController BJoint / bothOther (specify)Who handles data accuracy/rectification updates across systems? *SelectController AController BJoint / bothOther (specify)Who maintains records of processing / documentation for this joint activity? *SelectController AController BJoint / bothOther (specify)Additional allocation notes (optional)🛡️ Security, Breach & Compliance 🛡️ Security, Breach & Compliance Security standards, breach handling, and compliance commitments. Security measures (select) *Encryption in transitEncryption at restAccess controls / MFALogging & monitoringVulnerability managementBackups & disaster recoveryStaff trainingOtherIf 'Other', describeBreach notification lead (initial assessment & coordination) *SelectController AController BJoint / bothOther (specify)Breach contact details (24/7 if possible) *Breach procedure / timeline notesDo you require Data Protection Impact Assessments (DPIAs) for this activity? *SelectNoYesDPIA approach / owner / review cycle🌐 Transfers & Processors 🌐 Transfers & Processors International transfers and any processors used by either controller. Will personal data be transferred outside the UK/EEA? *SelectNoYesTransfer mechanism(s) used (select)EU SCCs (Standard Contractual Clauses)UK IDTA / UK AddendumAdequacy decisionBinding Corporate RulesDerogation (Art.49)OtherIf 'Other' mechanism or notesAre processors/subprocessors used for this joint activity? *SelectNoYesList key processors (name, role, country, service)Processor due diligence / contract requirements (optional)🧑⚖️ Transparency & Data Subject Rights 🧑⚖️ Transparency & Data Subject Rights How data subjects are informed and how rights are handled between controllers. How will the essence of this joint arrangement be made available to data subjects? *SelectIn privacy notice (link/section)Dedicated public pageOn request via contact pointOther (specify)Link / location (if applicable)Who handles objections/withdrawal of consent (if applicable)? *SelectController AController BJoint / bothOther (specify)Internal SLA for DSAR handling (optional)🤝 Liability, Indemnities & Disputes 🤝 Liability, Indemnities & Disputes Allocation of risk, cooperation duties, and dispute resolution. Liability approach *SelectEach party responsible for its own compliance failuresProportional allocation (based on fault/contribution)One party indemnifies the other (specify)Other (specify)Liability / indemnity detailsDispute resolution *SelectCourtsMediation then courtsBinding arbitrationVenue / seat / rules (if arbitration or specific courts)Governing-law clause wording notes (optional)⏳ Term, Changes & Exit ⏳ Term, Changes & Exit Duration, amendment process, and how the parties unwind the arrangement. Term *SelectOngoing until terminatedFixed term (specify dates)Start Date (if fixed term)End Date (if fixed term)Termination rights & exit steps *Change control / amendment process (optional)✍️ Signatures & Attachments ✍️ Signatures & Attachments Acknowledgements, typed signatures, dates, and uploads. Acknowledgements (must check all) *Information is true and correctI/we are authorized to sign for the organizationWe will cooperate on data protection obligations for this joint activityController A Authorized Signatory (type name) *Controller A Title/PositionController A Sign Date *Controller B Authorized Signatory (type name) *Controller B Title/PositionController B Sign Date *Attachments (optional: policies, annexes, processor list) Drag & Drop Files, Choose Files to Upload PreviousNameGenerate Draft Document
