Skip to main content
CENEDRIL MANUAL
Open Cenedril
Data Privacy Assistant · DPA Generator

Manage data processing agreements (DPA)

Updated on 3 min Pro plan Open in Cenedril

Goal Generate a data processing agreement (DPA) draft for a processor or controller relationship that carries over the connected processing activities and applied TOMs.

In Cenedril’s Data Privacy Assistant you generate an Art. 28 GDPR data processing agreement draft under DPA Generator. You pick your role (controller or processor) and the counterparty, and Cenedril carries the connected processing activities and applied TOMs into a finished preview. You output the text in German or English and copy it to the clipboard.

Check the prerequisites

Open the Data Privacy Assistant

In the sidebar open the Data Privacy Assistant. The overview shows the individual modules, including the DPA Generator. If the entry is greyed out, a prerequisite is missing: the hint reads either Complete the Kickstarter first or Requires external data transfers.

Add data transfers

The generator draws on the records of processing activities and the data transfers. Enter your external recipients and their TOMs first so the DPA draft is filled completely. Once at least one matching data transfer exists, the DPA Generator unlocks.

Generate the DPA draft

Open the DPA Generator

In the overview click DPA Generator. The page shows the title DPA Generator and a note below it that the tool is for informational purposes only and does not constitute legal advice.

The DPA Generator with the role selection and the legal-advice note.

Choose your role

Under Select your role for this DPA: pick one of the two buttons. Generate as Controller creates the DPA for a processor you engage. Generate as Processor creates the DPA from the service provider’s perspective for a controller.

Select the counterparty

Depending on the role, a dropdown appears. In Controller mode, pick the relevant recipient under Select Processor (Recipient with Missing DPA):. In Processor mode, pick the organisation under Select Controller you provide services for:. If the list is empty, the matching data transfers are still missing from the record.

Selecting the DPA counterparty in Controller mode.

Review the connected data

After the selection, the page shows the Connected Processing Activities and, under Applied Controls (TOMs), the technical and organisational measures carried over from those activities. Check that the correct activities appear. If something is missing, add it on the Data transfers & TOMs page.

Review the preview and choose the language

Under Generated DPA Preview the full draft appears. The language toggle next to the heading switches between the German and English versions. Confirm that the names of the parties, the activities, and the measures appear correctly in the text.

The generated DPA preview with the language toggle and copy icon.

Copy the draft

Click the copy icon next to the preview heading. Cenedril places the full DPA text on your clipboard and reports DPA text copied to clipboard. From there, paste it into your contract document.

Result: the DPA generator shows a complete draft in the chosen language that carries over the connected processing activities and applied TOMs of the selected party. The text is on your clipboard, ready for legal review and for inclusion in your contract.

Frequently asked questions

Why is the DPA generator greyed out?

The generator only unlocks once the Data Privacy Kickstarter is complete and at least one external data transfer exists. Without a recipient missing a DPA (Controller mode) or a controller you act as processor for (Processor mode), the page stays disabled. Add the data transfers in the record first.

What do the two modes "Generate as Controller" and "Generate as Processor" mean?

"Generate as Controller" creates the DPA for a processor you engage. "Generate as Processor" creates the DPA from the service provider's perspective for a controller you process data for. Cenedril sets the roles in the draft accordingly.

Where do the applied TOMs in the draft come from?

The technical and organisational measures shown under "Applied Controls (TOMs)" are carried over from the processing activities connected to the selected party. Maintain the TOMs on the Data transfers & TOMs page first so the draft picks them up.

Is the generated DPA legally binding?

The generator produces a draft for informational purposes and does not constitute legal advice. Have the text reviewed by a legal professional and adapted to your specific situation before you use it.

Can I output the draft in both languages?

Yes. The language toggle in the preview switches between the German and English versions. The copy icon places the displayed text on your clipboard.

Data Privacy Assistant

Datentransfers & TOMs dokumentieren

So dokumentieren Sie interne und externe Datenübermittlungen mit Drittland-Garantien und ordnen jeder Verarbeitungstätigkeit die passenden technischen und organisatorischen Maßnahmen zu.

Data Privacy Assistant

Verzeichnis von Verarbeitungstätigkeiten (ROPA) erstellen

So legen Sie im Datenschutz-Assistenten von Cenedril ein Verzeichnis von Verarbeitungstätigkeiten nach Art. 30 DSGVO an und prüfen es gegen Ihre Assets.

Data Privacy Assistant

Datenschutz-Kickstarter ausfüllen

So füllen Sie den Datenschutz-Kickstarter aus und lassen Cenedril aus Ihrer Unternehmensstruktur erste Entwürfe für Verarbeitungstätigkeiten, Assets und Datentransfers erzeugen.