Contract review for privacy and compliance teams

Check DPAs and BAAs against the laws that apply before anyone signs, with every gap tied to its source.

Where privacy reviews slow down

Privacy terms are spread across documents

Data terms sit in the DPA, the MSA and the security exhibit, and each has to be read against the others.

Each law asks for something different

GDPR, CCPA and state health privacy laws set different requirements for the same vendor.

Evidence is hard to show later

When an auditor asks how an agreement was checked, the answer is in someone’s inbox.

Every DPA checked against the law

Proviso checks each requirement, cites the article or section it comes from and suggests language from your privacy playbook for anything missing.

A DPA checked against GDPR, CCPA and Virginia privacy law, with a missing clause and a suggested fix

Laws Proviso checks for privacy teams

Each check names the article or section it comes from.

GDPR Article 28

Processor obligations, subprocessors, audits and deletion at the end of service

DPAs

DPAs

GDPR Chapter V

Transfers outside the EU and the safeguards that cover them

DPAs, vendor agreements

DPAs, vendor agreements

CCPA and CPRA

Service provider terms and limits on selling or sharing personal information

DPAs, vendor agreements

DPAs, vendor agreements

UK GDPR

The UK addendum and transfers from the United Kingdom

DPAs

DPAs

HIPAA

Business associate terms for protected health information

BAAs

BAAs

Create a free website with Framer, the website builder loved by startups, designers and agencies.