Purpose & Scope
Define processing purpose, covered systems and transactions, and which parties the document governs.
A consistent CDPG template reduces ambiguity about data responsibilities, simplifies audits, and documents consent and processing details required by federal and state laws. It establishes who handles what data, how it is protected, and how long records are kept, improving operational clarity without replacing legal review.
Different teams use the Business CDPG Template at various stages: legal for contract terms, IT/security for controls, procurement for vendor onboarding, and operations for ongoing compliance.
Use the template as an operational record and a starting point for tailored agreements; involve counsel for high‑risk data processing or unusual jurisdictional requirements.
| Field | Configuration |
|---|---|
| Authentication | Email link + optional SMS code |
| Routing | Sequential signers with conditional steps |
| Reminders | Automatic reminders every 3 days |
| Storage format | PDF/A with audit trail exported |
Ensure the platform supports secure transport, common file formats, and the authentication level your compliance group requires.
Choose storage that supports AES‑256 at rest, tamper evidence, and exportable audit trails to meet internal and regulatory review needs.
1–3 business days to gather documents and populate template
3–7 business days depending on complexity and counsel availability
24–72 hours with eSignature; longer if notarization required
1–7 days for in‑person or RON sessions
Export and store executed copy within 24 hours of completion
Define processing purpose, covered systems and transactions, and which parties the document governs.
Identify legal names, roles (controller/processor), addresses and primary contacts for notices.
List exact categories of data, permitted uses, and any transfer or sub‑processor rules.
Describe encryption, access controls, incident response and periodic testing obligations.
State retention periods, deletion procedures, and methods for secure destruction or return.
Specify who may bind each party, include title lines and date fields for effective execution.
Optica standardized its vendor data processing terms across portfolio companies to reduce onboarding time.
A regional property manager used the template to document tenant data handling and disclosures.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | Yes, 7‑day free trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |