Standard Contractual Clauses SCC - Document Builder 👷‍♂️

Please enable JavaScript in your browser to complete this form.

Generator Prompt

Document Type

Source URL

🌍 Jurisdiction & Basics

Choose governing jurisdiction and the document language, then set the effective date and transfer context.

Country *

Language of the completed document *

Governing Law / State‑Province‑Country *

Effective Date *

Transfer Parties (at a glance) *

Which transfer mechanism(s) should be included? *

EU SCCs (GDPR Art. 46)
UK Addendum to EU SCCs
UK IDTA (standalone)
Swiss Addendum
Other / bespoke clauses

Short description of the transfer (purpose / service) *

🏢 Parties & Contacts

Full legal details for the data exporter and data importer (and optional representatives / DPOs).

Data Exporter (Party A) — Legal Name / Company *

Data Exporter Address *

Data Exporter Contact Email *

Data Exporter Contact Person (name + title)

Data Exporter Registration / Company No. (optional)

Data Importer (Party B) — Legal Name / Company *

Data Importer Address *

Data Importer Contact Email *

Data Importer Contact Person (name + title)

Data Importer Registration / Company No. (optional)

EU/UK Representative (if applicable) — details

DPO / Privacy Contact (if applicable) — details

🗂️ Transfer Details & Annex I

Describe the data subjects, categories of data, processing purpose, recipients, and transfer frequency.

Data subjects (who are the individuals?) *

Categories of personal data (e.g., contact, HR, usage data) *

Special category data? (if any)

Purpose(s) of the transfer and processing *

Processing operations (what will the importer do?) *

Transfer frequency (one‑off / continuous / periodic) *

Duration of processing / retention period *

Sub‑processors / onward recipients (if known)

📜 SCC / IDTA Configuration

Select SCC modules, UK Addendum / IDTA options, and any special annex requirements.

EU SCCs — Module *

UK Addendum — Which parties sign the Addendum? *

UK IDTA — Transfer type (Table 2) *

UK ICO Addendum/IDTA version (optional)

Swiss Addendum — Supervisory authority / forum (optional)

Additional clauses / deviations (if any)

🛡️ Security, Compliance & Annex II

Technical and organisational measures, audits, incident handling, and onward transfer controls.

Technical & Organisational Measures (TOMs) — summary *

Security controls included (select all that apply)

Encryption in transit
Encryption at rest
Access controls / least privilege
MFA
Logging & monitoring
Backups & disaster recovery
Vulnerability management
Penetration testing
Data minimisation
Staff training
Other

If 'Other', describe additional controls

Breach notification timeframe *

Audit / compliance approach (e.g., SOC 2, ISO 27001, questionnaires)

Government access requests handling (challenge/notify where lawful)

✍️ Signatures & Attachments

Confirm accuracy, upload annexes, and add typed signatures and signing dates.

Attachments (Annexes, security schedule, sub‑processor list)

Drag & Drop Files, Choose Files to Upload You can upload up to 3 files.

Acknowledgements (must check all) *

Information is true and correct
I/we have authority to sign for the relevant party(ies)
We will complete Annexes consistently with our actual practices

Data Exporter Signatory (type name) *

Exporter Sign Date *

Data Importer Signatory (type name) *

Importer Sign Date *