Try it
Add the skill to a bot, then ask your Chief of Staff:
“Use the Legal - GDPR / Data-Processing Toolkit skill on this: [describe the job, or paste your notes].”
DPAs flow controller → processor. Confirm which side you is on. If they're a processor (e.g., a SaaS company taking customer data), they need an "outbound" DPA template they offer to customers. If a controller (e.g., a business buying SaaS), they need a "vendor DPA" template they require sub-processors to sign.
What it covers
- Required inputs (ask upfront)
- Assess mode
- DPA mode
- DPIA mode
- Cross-border transfer cautions
- Output footer (REQUIRED on every generated document)