Stripe, Inc.stripe.com · illustrative evaluation
Processor management · Art. 28the contract itself, not a questionnaire
Processor management
starts with the DPA.
Name the processor. Legiscope finds and verifies its DPA, assesses it against Article 28, maps its declared subprocessors and international transfers, and keeps the exact agreement as evidence. You get one working record to review, connect and export.
§ 1 One clause, and the assessment behind it
Art. 28(2) · sub-processingOne automated workflow
Name the vendor. About four minutes later, open the evaluation.
- No more DPA hunting
Legiscope finds and verifies the vendor’s official agreement, then keeps the exact copy it analysed.
- 25 checks. No manual checklist.
All 25 requirements are assessed from the agreement, with the supporting language and gaps already identified.
- Subprocessors and transfers, already mapped
Declared subprocessors are created and international transfers are linked to the countries involved.
- A review-ready record in minutes
Compliance score, evidence, findings, subprocessors and transfers are already assembled in one editable evaluation.
Legiscope assessmentOne vendor name starts the complete review
- Official DPA1 agreement found and verified✓
- Article 2825 of 25 requirements assessed✓
- Subprocessors17 sub-processors found✓
- International transfers4 transfers to 3 countries✓
- Evidence1 dated DPA copy attached✓
§ 2 The problem this solves
and why DPAs go unreadOne processor or one hundred.
The answer still takes minutes.
Article 28 makes you answerable for paper you did not write: every processor needs a contract, and the contract needs specific clauses. The problem is rarely unwillingness — the contracts are scattered, unread, and changing. Legiscope does the collection and the first reading: every verdict proposed with the clause behind it, every decision signed by a person.
Forty vendors, three contracts on file.
Nobody knows where the addenda live. So you email vendors, chase legal inboxes, collect PDFs into a folder — and the review is exhausted before anyone has read a line.
With LegiscopeLegiscope finds each vendor’s addendum on the vendor’s own legal pages and files a dated copy on the relationship. Nothing to send, nobody to chase.
“There’s a DPA — we’re covered.”
Signed is not read. Article 28(3) makes eight specific demands of every contract, and a questionnaire the vendor fills in about itself answers none of them.
With LegiscopeEvery section is read against the eight requirements, and each verdict quotes the clause it rests on. You check the conclusion, not the vendor’s word.
The paper you approved no longer exists.
Vendors rewrite addenda and sub-processor lists without asking — the notice goes to a webpage nobody on your side reads. Your approval quietly refers to a version that is gone.
With LegiscopeThe change is named and that relationship reopens for review; the rest keep their date and their verdict. The copy you approved stays on file.
Your processor stack, assessed
From processor list to compliance decisions—in minutes.
See how Legiscope verifies official DPAs, scores each processor against Article 28, and maps the subprocessors and international transfers behind your vendors—all in one review-ready portfolio.
Book your demo →