Privacy compliance
GDPR Art. 28 · CCPA · SCCs

DPA Drafting. Vendor & customer side.

A Data Processing Agreement (DPA) is required between any data controller and processor under GDPR Article 28, and between businesses and service-providers under CCPA / CPRA. The DPA defines: scope and duration of processing, types of personal data, processor obligations (security, sub-processor approval, breach notice, deletion at end), audit rights, indemnity, international transfer mechanism (SCCs). We draft customer-side (for your platform's customers to sign) and vendor-side (for you to sign with your vendors).

All 50 states + DC 60-day money-back SOC 2 Type II
How it works

How we handle Conservation Easement, end-to-end.

A conservation easement is a permanent restriction on the use of land, typically donated to a qualified land trust to preserve the land's natural or open-space character.

1

Eligibility review

Land must have conservation value: scenic, ecological, historic, open-space, or recreational. We assess whether your land qualifies. Most rural and undeveloped properties do; urban properties rarely.

2

Land trust selection

Donation must be to a qualified land trust (501(c)(3)). We refer to local and national land trusts (Land Trust Alliance, The Nature Conservancy, regional trusts). They accept the easement and hold the restriction in perpetuity.

3

Engineering + appraisal

Engineering work documents the conservation value. Qualified appraisal determines diminished land value (the deduction amount). IRS scrutinizes appraisals; we use highly credentialed appraisers with conservation easement experience.

4

Legal documentation + closing

Easement document recorded with county recorder. Permanent restriction runs with the land. Donor receives appraisal-supported deduction. Coordination with attorney specializing in conservation easements.

What we'll set up for you

A clean handoff, in four steps.

You give us the basics. We handle the state, the IRS, and the compliance clock so you can focus on the business.

01 · Name + Brand

A name that's actually available.

Real-time check against the state register, USPTO trademark database, and matching domains.

02 · State filing

Filed with the Secretary of State.

We submit your Articles, pay the state fee on your behalf, and return the stamped certificate.

03 · Federal IDs

EIN + the right tax setup.

Federal Employer ID with the IRS, plus state tax accounts when your business needs them.

04 · Stay compliant

Registered Agent + deadline tracking.

Your agent on file in every state, with every renewal and annual report tracked in one calendar.

Pricing

Transparent conservation easement pricing.

Government fees pass through at cost. No upsells.

Standard DPA · single party

$899
GDPR + CCPA only

Standard DPA covering Article 28 + CCPA service provider terms. Single jurisdiction. Best for SaaS sellers needing customer-facing DPA fast.

Get started

Negotiation pack · counsel-reviewed

$2,899
DPA + redlines + memo

Standard + SCCs + redline against opposing-side draft + fallback positions + memo on key issues (sub-processor, indemnity, audit) + 1hr counsel call. For high-stakes vendor negotiations.

Get started
FAQ

About the Conservation Easement Service.

Who needs to sign a DPA?
Both controller and processor. Customer-side: your SaaS customers (the controller) sign with you (the processor). Vendor-side: you sign with your data-handling vendors. Each relationship is its own DPA.
Do I need a DPA with US-only vendors?
Yes if the data includes EU/UK personal data (GDPR Article 28 applies extraterritorially) or California personal info (CCPA service-provider rules). For purely US-only data of US-only residents, no federal DPA mandate, but state-specific rules (CO, VA, CT, UT) increasingly require similar.
Are the 2021 EU SCCs still valid?
Yes. The 2021 Commission Decision (2021/914) replaces 2010 SCCs and is currently valid. Schrems II compliance requires SCCs + a Transfer Impact Assessment. The EU-US DPF (effective 2023) provides an alternative for DPF-certified US recipients.
What about UK transfers post-Brexit?
UK uses the UK International Data Transfer Agreement (IDTA) or the UK Addendum to EU SCCs. Most US vendors offer both. We draft for both jurisdictions if relevant.
Can I just use the customer's DPA?
Often yes - customer DPAs are usually controller-favorable. Review carefully: indemnity caps, sub-processor restrictions, audit rights (frequency, scope), termination triggers. We review + redline customer DPAs as part of contract review.
Do DPAs ever expire?
DPA terms typically follow the main services agreement. Often a perpetual annex that updates with regulation changes (Schrems II, SCCs 2021, DPF). We include an update mechanism in our DPAs.
Why File.Business

Premium compliance, no service-fee markup.

Trust you can verify

SOC 2 Type II audited platform. 220,000+ businesses served. 60-day money-back on service fees. State fees passed through at cost with no hidden markup. Explicit AUP on restricted industries.

A compliance partner, not a transaction

Most providers go quiet after checkout. We auto-track every annual report, registered agent renewal, and license deadline across your entities. The Business OS dashboard keeps your compliance score visible year-round.

Premium experience competitors cannot match

Premium positioning, transparent pricing, no service-fee markup on state or federal filings. Premium positioning, transparent pricing, no service-fee markup on state filings.

Start your business in the next 5 minutes.

No state-fee markup. Pay only the state fee. 60-day money-back guarantee.

No state-fee markup 60-day money-back Cancel anytime
$0 + state fee Start my business