What you see here
The menu lists Data Sharing Agreements as a separate item, right below GDPR Documents. Clicking it opens the GDPR Documents page with the Data Sharing Agreements tab active. So it is not a screen of its own but a tab next to Core documents, Templates & tools and Seals & widgets.
This tab is the register of all your data sharing agreements. For every third party you share personal data with, and for every party that shares data with you, GDPR expects an agreement that records who is the controller, who is the processor and which data is involved. GDPRWise drafts that agreement from your dossier and sends the other party a link to review it. The rows come from Processes we share with others and Processes others share.
Each row shows the third party, the process, the Direction (data you share or data others share with you), the number of data items, the Status and the Document. The status is one of:
- Not sent: the agreement is drafted but the request has not gone out yet.
- Pending: the request is out and the other party has not answered. The link in their email is valid for 30 days.
- Changes requested: the other party asked for changes. It is your turn.
- Accepted: a version of the agreement has been accepted and recorded.
- Declined: the other party declined, with a reason.
- Expired: the link ran out before the other party answered.
- Withdrawn: you withdrew the request.
- Failed: the request email could not be delivered.
For a draft, the document column offers Preview draft. Once a request has been sent, the document icon opens the agreement itself: the current version, earlier versions with their changes, and the history of every reply, message and decision from both sides. An accepted version can be downloaded there as a PDF. If you ticked in the Third-Party Dossier that an agreement already exists, for example the standard agreement Microsoft or Google publish on their website, GDPRWise does not generate its own version.
What is expected of you
The tab is an overview, but it also shows where action is needed:
- Check that every third party in your dossier has an agreement here. If one shows Not sent, send the request from the outgoing screen of the Third-Party Dossier.
- Open every agreement with Changes requested. Read what the other party asks, then answer: Edit text to adjust the wording yourself, Regenerate from the dossier under More actions after you corrected the dossier, or Send a message if words are enough. Editing asks you to confirm I take responsibility, because GDPRWise no longer vouches for edited text.
- For an agreement another company sent you, Pending means they are waiting for your reply. Open it and accept, request changes or decline.
- For Expired or Failed, check the recipient’s email address on the card in the Third-Party Dossier and send the request again. For Declined, read the reason, adjust the process or the text and send an improved version.
- Download the accepted versions and keep them with your records. In an audit by the data protection authority, the accepted PDF and the acceptance record (who accepted which version, and when) are your evidence.
The full flow, including what the other party sees, is explained in How data sharing agreements work in GDPRWise. As everywhere in GDPRWise, everything is saved automatically.
Next step
When every third party shows Accepted, or an existing agreement you recorded yourself, this tab is done. Then move to the Core documents tab on the same page to generate your privacy policy and records of processing; those documents draw on your Third-Party Dossier too. For the background on why you need an agreement with every party, read Your Third-Party Dossier: With Whom Is Data Shared?.
Watch the video
The Third-Party Dossier video shows how an agreement is drafted from the dossier and sent: watch the Third-Party Dossier video.