---
title: "Sign a contract with every processor · Agent Wranglers"
url: https://agentwranglers.se/playbook/website/privacy/processor-agreements
updated: 2026-10-20
licence: "All rights reserved"
---

# Sign a contract with every processor

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Required
- Chapter: [Privacy](https://agentwranglers.se/playbook/website/privacy)
- Rule: Have a data processing agreement with every service that handles personal data for you, such as hosting, email or analytics.
- How: List each processor in your data map, with its agreement and where it stores data. Under GDPR Article 28 the agreement is required. For transfers outside the EU, check the legal basis, such as Standard Contractual Clauses or the EU-US Data Privacy Framework. An appeal against that framework is pending at the EU Court of Justice, so keep the clauses ready as a fallback. See also [keep one register of vendors](https://agentwranglers.se/playbook/compliance/processors-and-transfers/vendor-register) and [check each agreement covers Article 28](https://agentwranglers.se/playbook/compliance/processors-and-transfers/dpa-article-28).
- Check: Every processor in the data map has a signed agreement on file, and appears as a recipient in the privacy policy.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers website playbook: https://agentwranglers.se/playbook/website/privacy/processor-agreements`.

- Previous: [Keep personal data out of addresses](https://agentwranglers.se/playbook/website/privacy/personal-data-out-of-urls)
- Next: [Plan for a data breach](https://agentwranglers.se/playbook/website/privacy/breach-plan)
- [Privacy](https://agentwranglers.se/playbook/website/privacy)