For customers processing personal data of EU/UK data subjects, Ghost offers a Data Processing Agreement that incorporates the Standard Contractual Clauses.
Request a signed DPA
Email legal@ghost.privacy with your company name, the name of the signatory, and any clauses you would like to negotiate.
What the DPA covers
- Roles and responsibilities of controller and processor
- Categories of personal data processed
- Sub-processor notification
- Security obligations
- International data transfers (SCCs / UK IDTA)
- Audit rights
- Return / deletion of personal data on termination