Gixo Lex · deterministic analysis
DPA Article 28 Check
Check a pasted DPA against a baseline of ten common topics; detected topics are not a legal verdict.
DPA agreement checklist: the topics this tool checks
This checker looks for explicit duties covering ten common DPA topics in a pasted draft. The list is the tool's baseline, not an exhaustive list of GDPR requirements. It reports which topics it could not detect:
- Documented instructions — the processor acts only on the controller's written instructions
- Confidentiality — everyone with access is under a duty of confidence
- Security measures — the Article 32 technical and organisational measures
- Subprocessors — authorisation, and flow-down of the same obligations
- Data-subject requests — assistance with access, erasure and the other rights
- Breach assistance — help meeting personal data breach notification duties
- DPIA assistance — help with data protection impact assessments
- Deletion or return — what happens to the data when the service ends
- Audit information — information and audits to demonstrate compliance
- International transfers — the transfer mechanism, e.g. standard contractual clauses
It reports how many of the ten topics it detected and lists the rest as not detected. Detection uses a bounded phrase checklist and looks for explicit duties; equivalent wording or context can be missed. Treat a "not detected" line as a prompt to review the draft, not as a finding that the clause is absent.
Input
Details
How DPA Article 28 Check works
See what the tool accepts, what it checks, how to read the result, and where human review still matters.| Topic | Details | What to know |
|---|---|---|
| Input | Text input capped at 150,000 characters | The public endpoint rejects input outside its documented bound. |
| Processing | Deterministic rules; no AI model call | The same input and rules produce the same analysis. |
| Output | Complete analysis or attributed portable output | The free result is returned on the page rather than hidden behind an account. |
| Storage | Nothing stored | The submitted material is processed for the request only. |
What is a DPA agreement?
A data processing agreement sets out how a processor handles personal data on a controller's behalf. This checker uses ten common DPA topics as a review checklist; it does not determine whether the agreement satisfies GDPR.
Is a DPA legally required?
Under the GDPR, yes: Article 28(3) requires a contract or other binding legal act wherever processing is carried out by a processor for a controller. This tool checks a draft for those topics; it does not tell you whether your agreement is adequate, and it is not legal advice.
Do I need an account to use DPA Article 28 Check?
No. The public tool runs without an account.
Does this tool call an AI model?
No. It applies deterministic parsing and validation rules.
Is my input stored?
No. The public tool does not save the submitted input.
What does the paid product add?
Use the flagged DPA topics and supporting sources to prepare a compliance working paper, evidence matrix, checklist, or policy draft in Lex. A qualified reviewer determines the legal conclusions.
Updated