DPA.

24 DPAs covering processor relationships under GDPR Art 28. 6 missing the required sub-processor disclosure clause. 2 still reference the 2010 SCCs, not the 2021 modules.

The DPA is the only document you have when the data leaves your platform.

DPA-013 · vendor: AnalyticsCo OLD SCCs

Signed 2020-08 with 2010 SCCs. EDPB recommends 2021 modules.

Re-paper with 2021 SCCs, attach TIA, refresh sub-processor list.