Understanding the Types of Contracts Ingested by Relyance
Overview
Relyance scans agreements to identify third-party vendors and automatically makes them visible in the data map. This contributes to the automatic creation of a robust data map without any manual intervention.
This article describes the different types of contracts and how Relyance ingests them.
Contracts types
Relyance focuses solely on contracts related to data protection and privacy. Here are the categories of contracts that Relyance prioritizes.
DPAs
| A Data Protection Agreement (DPA) is a contract between two parties, typically a data processor and a data controller, about how to handle and protect information. It outlines what the party managing the data should do to keep it safe, legal, and in line with regulations like the GDPR. |
|---|
Relyance will ingest DPAs as the basis of the contractual relationship of a third party.
DPA Amendments
| A Data Protection Agreement (DPA) Amendment is a formal change or addition made to the original DPA contract between two parties, typically a data processor and a data controller. It stipulates alterations to the way data should be managed in order to keep it secure, legal, and in line with evolving regulations such as the GDPR. |
|---|
Relyance will ingest DPA Amendments to provide supplemental information for the current DPA.
MSAs
| A Master Services Agreement (MSA) is a comprehensive contract between two parties, often encompassing various services and transactions. It can contain specific Data Protection Agreement (DPA) language, outlining responsibilities and procedures to ensure data is managed securely, legally, and in compliance with regulations such as the GDPR. |
|---|
Relyance will ingest MSAs, in lieu of a DPA, as the basis of the contractual relationship of a third party, provided that Relyance detects sufficient contractual provisions related to data processing and data protection. If so, Relyance will treat the MSA as a quasi-DPA.
Other
Although Relyance can process various types of contracts, some are considered irrelevant to the data protection program. However, documents like order forms and invoices might still be processed if they pertain to a vendor that's associated with the privacy program.
Annotations only come from DPAs, quasi-DPAs, and DPA Amendments currently.
Contract format
| Only PDFs will be ingested by the Relyance platform as .doc/docx files are more likely to be drafts and we are only concerned with executed final obligations. |
|---|
