Pricing
Legal

GDPR Compliance

Effective Date: July 14, 2026

1. Our Commitment to GDPR

Agreed is committed to protecting the personal data of all users, including individuals located in the European Economic Area (EEA) and the United Kingdom. This page explains how we comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR.

This page should be read alongside our Privacy Policy, which provides full detail on what data we collect and how it is used.

2. Data Controller

For the purposes of GDPR, Agreed acts as the Data Controller for personal data collected through account registration, billing, and platform usage. Where users upload documents containing personal data of third parties (e.g., counterparties to a contract), the uploading user acts as the Data Controller for that content, and Agreed acts as a Data Processor.

3. Legal Basis for Processing

We process personal data under the following legal bases, as applicable:

  • Contract: Processing necessary to provide the services you have signed up for
  • Legal obligation: Compliance with e-signature, tax, and financial regulations
  • Legitimate interests: Platform security, fraud prevention, and service improvement
  • Consent: For optional processing such as marketing communications, which you may withdraw at any time

4. Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

  • Right of access: Obtain confirmation of and access to your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your data ("right to be forgotten"), subject to legal retention obligations
  • Right to restrict processing: Limit how we use your data in certain circumstances
  • Right to data portability: Receive your data in a structured, commonly used format
  • Right to object: Object to processing based on legitimate interests or direct marketing
  • Right to withdraw consent: Where processing relies on consent
  • Right to lodge a complaint: With your local supervisory authority if you believe your rights have been violated

To exercise these rights, contact us at [email protected]. We will respond within one month, as required by GDPR, or explain if an extension is needed for complex requests.

5. International Data Transfers

As a global platform, Agreed may transfer personal data outside the EEA or UK. When we do so, we rely on appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK International Data Transfer Agreement (IDTA), where applicable
  • Transfers to jurisdictions recognized as providing adequate protection under GDPR

6. Data Protection by Design and by Default

Agreed implements data protection principles at every stage of platform development, including:

  • Collecting only the data necessary to provide our services (data minimization)
  • Encrypting personal data in transit and at rest
  • Restricting internal access to personal data on a need-to-know basis
  • Conducting Data Protection Impact Assessments (DPIAs) for high-risk processing activities

7. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and will notify affected users without undue delay, in accordance with GDPR Articles 33 and 34.

8. Data Processing Agreements

Business and enterprise users who process personal data of third parties (such as customers or employees) through Agreed may request a Data Processing Agreement (DPA) governing our role as a processor. Please contact [email protected] to request a DPA.

9. Changes to This Page

We may update this GDPR Compliance page to reflect changes in regulation or our data practices. Material changes will be reflected by updating the "Effective Date" above.

10. Data Protection Officer / GDPR Contact

For any GDPR-related questions, data subject access requests, or complaints, please contact:

Agreed

EEA and UK users also have the right to lodge a complaint directly with their local data protection supervisory authority.

Everything You Need to
Create, Send and Sign Documents

Agreed helps teams reduce delays, improve signing completion

Start Creating Now
image