I'll draft a GDPR Article 28-compliant Data Processing Agreement for your SaaS product or service — the contract you sign with your customers (or vendors) governing how personal data is processed.

What's included: full DPA with controller/processor roles, documented instructions, security measures (Exhibit B), sub-processor management with notification and objection rights, data subject request handling, 72-hour breach notification, DPIA assistance obligations, return/deletion provisions, audit rights, and international data transfer mechanisms including EU Standard Contractual Clauses (2021 SCCs — Module 2 and Module 3) and UK Addendum. Complete with Exhibit A (Details of Processing) and Exhibit B (Security Measures). Delivered in Word and PDF. Two revision rounds included.

Essential for any SaaS company selling to enterprise customers or operating across EU/UK/US jurisdictions.