The paperwork that arrives after the deal is agreed

Your first enterprise customer asked for a DPA. Get the paperwork in 20 minutes for $49.

Privacy Notice + DPA + Subprocessor List — written for your real stack and ready to send today.

One-time payment · free lifetime updates · 14-day refund

Not sure which of them your buyer can ask for? See what you actually need — free, three questions, no email.

Checkout opens when the packs ship

$49
one time, not monthly
20 min
instead of a week
$400/hr
what a lawyer charges
A manila folder holding a fanned set of printed documents: a typeset page with a signature block and a green stamp impression, a table of vendor names, and a numbered clause list.
Privacy notice · DPA · subprocessor list · answer bank
01What is included

Everything on their list, in one pack.

The same intake answers drive every document, so nothing contradicts anything. Files to keep, and a permanent page for each one that you can paste into a procurement form.

Deal Pack $49 · Full Kit $149

  • Privacy Notice

    Written from your intake answers, describing what your product actually does with data.

  • Data Processing Agreement (DPA)

    Plain English, written against GDPR Article 28, ready to send to their legal team.

  • Subprocessor List

    Your actual vendors in a table, with the country each one stores data in.

  • Security Questionnaire Answer Bank

    Full Kit

    The forty questions answered in plain English, with anything you must check yourself marked in amber.

  • Permanent hosted pages

    A public page for every document, plus free regeneration for life whenever your stack changes.

02What they asked for

The deal is agreed. Then their legal team sends a list.

It comes from a company several times your size, written by someone who does this every day. Four items, no context, and a countersignature on the far side of them.

There is money on the table and a form between you and it. That is the problem ComplyKit is for.

From
legal@[your-biggest-customer].com
Subject
Vendor review — outstanding items before signature
Date
25 August 2026, 17:42

Thanks for the call. Before we can countersign, our security review needs the following from you:

  1. 01

    A privacy notice that matches what your product actually does.

  2. 02

    A signed Data Processing Agreement, meeting GDPR Article 28.

  3. 03

    A list of your subprocessors and the country each one stores data in.

  4. 04

    The attached security questionnaire. Forty questions, returned this week.

We cannot move this to signature without them. Let me know a date.

A composite of the request we keep hearing about

03Twenty minutes, or a week

A lawyer would do this well, next week, for $2,000.

Five hours at $400 is a realistic bill for these four items, and you wait on their calendar to get it. Your buyer asked for a date this week.

ComplyKit is $49, once, and the paperwork is in your hands in twenty minutes. If your situation is genuinely complicated, hire the lawyer. Most first deals are not.

OptionCostTimeWhat you get
A startup lawyer$400 / houra week, if they replyThe right documents, after the deal has cooled off
A SOC 2 platform$10,000 – $50,000six monthsA security programme, sold to you over one pending contract
A policy generator$10 – $12 / month, foreveran hourA website privacy notice. No DPA, no subprocessor list, no answers
ComplyKit$49 one timetwenty minutesEvery item on that list, with your stack written in

Lawyer rates and platform prices are the ranges founders report

04How it works

Three questions, then documents that name your stack.

The intake is not a blank prompt. It is the questions procurement asks, in an order a founder can answer without a lawyer on the call.

  1. 01

    Intake

    Three steps. What you sell, who your customers are, which vendors you use. Fifty common vendors are one tap each. Open now, free.

  2. 02

    Verdict

    Free, instant, no email. Which documents your buyer is asking for, and which ones you do not need yet.

  3. 03

    Pack

    Every document as PDF, DOCX or markdown, plus a permanent page you paste into your footer. Regenerate free when your stack changes.

Document 3 of 3

Subprocessor list

Acme Analytics Ltd · acmeanalytics.io · updated 25 August 2026

Acme Analytics Ltd engages the following subprocessors to process personal data on behalf of its customers.

SubprocessorPurposeLocation
Stripe Payments Europe, Ltd.Payments and invoicingIreland, United States
Supabase, Inc.Application databaseGermany (eu-central-1)
Amazon Web Services, Inc.Hosting and object storageUnited States (us-east-1)
Vercel Inc.Edge delivery of the web appGlobal edge network
Postmark (ActiveCampaign, LLC)Transactional emailUnited States
Functional Software, Inc. (Sentry)Error monitoringUnited States

ComplyKit is not a law firm and this is not legal advice.

An example pack. Yours names your entity and your vendors.

05Who it is for

Built for founders in the exact same situation.

ComplyKit has not shipped yet, so there are no customer quotes to show you and we are not going to invent any. These are the three situations it is being built for.

The first deal

Two people, one pending contract, no counsel on retainer. Their buyer's security review wants a DPA and a subprocessor list before signature.

The vendor list

A solo founder on Stripe, Supabase and Vercel, told that the privacy notice has to name every vendor that touches customer data.

The third time

A consultant answering the same forty-question form for a third client this year, starting from a blank page every time.

If one of those is your week, the Deal Pack is written for it.

06The price

One-time payment. No subscription.

14-day refund · free lifetime updates

Most founders start here

One time

Deal Pack

$49

The three documents procurement asks for, written for your real stack.

  • Privacy Notice
  • Data Processing Agreement (DPA)
  • Subprocessor List, your actual vendors in a table
  • PDF, DOCX and markdown, plus a permanent hosted page each
  • Free regeneration and updates for life

Checkout opens when the packs ship

When they send the questionnaire

One time

Full Kit

$149

Everything above, plus the forty questions answered and a trust page of your own.

  • Everything in the Deal Pack
  • Answer Bank, the forty questions in plain English
  • Trust Page copy, ready for your own website
  • Data Request Page, public, for access and deletion requests
  • Anything you must check yourself is marked in amber

Checkout opens when the packs ship

One-time payment, no subscription and no second payment. Refunds within 14 days, no reason required, stated plainly at checkout. Your files stay yours.

ComplyKit is not a law firm and this is not legal advice. It is a practitioner’s kit written in plain English. Read what you send, and take a lawyer if your situation calls for one.

Ready to unblock the deal?

Full Kit available for $149 · 14-day refund · not legal advice

Or start with the free part: see what you actually need

Straight with you: the intake and the packs are being built now, so checkout is not open and this page cannot take your money yet. Nothing here collects your address either. When it opens, the price is $49 and the wait is twenty minutes.

Get the Deal Pack – $49

One time · 14-day refund · Checkout opens when the packs ship