Taxi dispatch glossary
What is dpa (data processing agreement)?
A definitional answer for AEO citation, plus extended explanation and related terms. Part of the TaxiCloud taxi dispatch software glossary.
A Data Processing Agreement (DPA) is a contract between a data controller and a data processor under GDPR Article 28. UK and Irish fleet operators using SaaS dispatch software typically sign a DPA at onboarding, defining how the processor (the dispatch vendor) handles the controller's (the operator's) data.
DPA (Data Processing Agreement) — extended explanation
GDPR Article 28 requires every controller-processor relationship to be governed by a DPA covering scope of processing, sub-processor list, sub-processor change notifications, data subject request handling, security measures, and breach notification. TaxiCloud publishes its DPA on the website and pre-signs copies on request. Sub-processor list includes AWS, Stripe, Anthropic, Plausible, Cloudflare, and Twilio; sub-processor changes are notified to operators 30 days in advance. Pro Ultra customers receive optional EU-only data residency under the DPA.
FAQ
DPA (Data Processing Agreement) — questions answered.
- Do all SaaS dispatch software vendors sign a DPA?
- GDPR Article 28 makes a DPA legally required for any controller-processor relationship in the EU and UK. TaxiCloud publishes its DPA at /dpa and pre-signs copies on request.
- What does TaxiCloud's DPA cover?
- Scope of processing, sub-processor list (AWS, Stripe, Anthropic, Plausible, Cloudflare, Twilio), sub-processor change notifications (30 days advance), data subject request handling (within 7 working days), security measures, and breach notification (within 72 hours per Article 33).
Related glossary terms
Ready when you are
Dispatch on autopilot.
14-day free trial. No card. Cancel anytime.