DPA register
This document is intentionally internal-only.
Operational record of click-through DPA acceptance dates and manual-execution signature dates per vendor. The public counterpart is /sub-processors, which lists every vendor and the existence of a DPA. The register itself is internal.
What we can share
Customer security reviews receive a summary of the controls described in this document via the HECVAT response. To request the relevant summary, contact [email protected].