Preview

Disclosing Party Information

Disclosing Party Information

Entity Type Individual Person Corporation Limited Liability Company (LLC) Partnership Sole Proprietorship Trust Non-Profit Organization Government Entity

Select the type of entity

Full Legal Name

As it should appear on the document

Doing Business As (DBA)

Optional trade name

State of Formation Select state... Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming District of Columbia

Where the entity was formed

Authorized Representative

Person authorized to sign

Representative Title

Title or position

Address

Street Address

Full street address including suite or unit number.

City

City of disclosing party residence or business.

State Select... Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming District of Columbia

State where this address is located.

ZIP Code

5-digit ZIP code.

Email Address

Used for correspondence and notices.

Phone Number

Best number for direct contact.

Receiving Party Information

Receiving Party Information

Entity Type Individual Person Corporation Limited Liability Company (LLC) Partnership Sole Proprietorship Trust Non-Profit Organization Government Entity

Select the type of entity

Full Legal Name

As it should appear on the document

Doing Business As (DBA)

Optional trade name

State of Formation Select state... Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming District of Columbia

Where the entity was formed

Authorized Representative

Person authorized to sign

Representative Title

Title or position

Address

Street Address

Full street address including suite or unit number.

City

City of receiving party residence or business.

State Select... Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming District of Columbia

State where this address is located.

ZIP Code

5-digit ZIP code.

Email Address

Used for correspondence and notices.

Phone Number

Best number for direct contact.

Security Requirements

Types of Data Covered *

Identify all categories of sensitive data the receiving party will access. Higher-sensitivity data (health, financial) requires stricter controls.

Required Security Certification No specific certification required SOC 2 Type II ISO 27001 HIPAA compliant PCI DSS FedRAMP

SOC 2 Type II is the most widely accepted security certification for SaaS and cloud service providers in the U.S.

Encryption Standard Required AES-256 (encryption at rest) TLS 1.2+ (encryption in transit) Both AES-256 and TLS 1.2+ No specific requirement

AES-256 is the U.S. government standard for classified data. TLS 1.2+ is required for all web-based data transmission under most compliance frameworks.

Breach Notification Timeframe 24 hours of discovery 48 hours of discovery 72 hours of discovery (GDPR) Immediately upon discovery

Most state breach notification laws (all 50 states have them) require notification within 30–72 hours. Contractual requirements may be stricter.

Data Retention / Deletion Secure deletion upon contract termination Deleted within 90 days of termination As specified per data category

Require written certification of deletion or destruction. Some regulations require audit-grade proof that data has been permanently erased.

Right to Audit Yes — disclosing party may conduct security audits Third-party audit report acceptable No audit rights

The right to audit security controls provides assurance that contractual obligations are being met. Many vendors offer SOC 2 reports in lieu of direct audits.

Review & Generate

Review your entries below before generating. Click Edit on any section to make changes.

Building your summary…

Document Preview

Refresh Preview Hide Preview

This is a preview of how your document will look. The final version will include complete legal language and state-specific provisions.

Data Security Agreement — Preview

Generating preview…

Everything looks good? Click Generate Document below to create your professional document instantly.

Previous Next Step Generate Document

Enable autosave (your progress will be saved locally)

Clear saved data

Not Legal Advice: This automated form assistance tool provides general information and document templates. It is not a substitute for legal advice from a qualified attorney. Laws vary by jurisdiction and change over time. Consult with a licensed attorney for advice specific to your situation.
Last updated: January 2026