Data Processing & Vendors Compliance

Your "fleet" is responsible for its "crew." When you hire a "vendor" (like an ESP or validation service), you are still legally responsible for what they do with your data. This section covers Data Processing Agreements (DPAs) and vendor vetting.

10 questions in this topic

Who is responsible for compliance — sender or ESP? What is a data processor in email marketing? What are DPA clauses that must exist between sender and ESP? What is sub-processing and how to track it? What is shared responsibility in cloud services? What’s the difference between controller-to-processor vs processor-to-processor transfers? What are typical privacy-by-design controls in ESP platforms? How to ensure vendors don’t store or sell data? What are audit rights under data-processing agreements? What’s the risk of sending data to a non-compliant vendor?

Questions about Data Processing & Vendors Compliance