Contracts & Agreements

Contracts and Agreements Overview

A solid contractual foundation is essential for any successful reseller operation. GDPR4All provides built-in tools for managing both your platform partnership agreement and the service agreements you generate for your clients. Everything is handled digitally within the platform — from drafting and signing to tracking and verification.

This guide covers the full lifecycle of contracts within the GDPR4All reseller programme.

Your Platform Partnership Agreement

When you are approved as a GDPR4All reseller, the first formal step is signing the Reseller Partner Agreement. This is the legal contract between your organisation and GDPR4All that governs your participation in the reseller programme.

What the Agreement Covers

The Reseller Partner Agreement addresses several key areas:

Terms of partnership — the duration of the agreement, renewal conditions, and termination provisions. Most agreements are set for an initial 12-month term with automatic annual renewal.
Commission structure — details of the wholesale pricing model, including how your wholesale rate is calculated, payment terms, and any volume-based discounts that may apply as your client portfolio grows.
Obligations and responsibilities — your responsibilities as a reseller, including client support standards, data protection obligations, and compliance with applicable laws. GDPR4All's responsibilities are also outlined, covering platform availability, security commitments, and technical support.
Intellectual property — terms governing the use of GDPR4All branding, white-label rights, and restrictions on modifying or reverse-engineering the platform.
Data processing — as a reseller, you may process personal data on behalf of your clients through the platform. The agreement includes or references a data processing agreement (DPA) that outlines the roles, responsibilities, and safeguards required under GDPR.
Limitation of liability and indemnification — standard commercial terms addressing liability caps and indemnification obligations for both parties.
Confidentiality — mutual confidentiality obligations covering business information, client data, and platform technical details.

Reviewing the Agreement

Before signing, we strongly recommend that you review the agreement carefully and, if necessary, seek independent legal advice. The full text of the agreement is available within the platform as soon as your reseller application is approved. You can download it as a PDF for offline review.

If you have questions about specific terms, your dedicated partner success manager can arrange a call with our legal team to discuss any concerns.

Signing Process

GDPR4All uses digital signatures to make the signing process fast, secure, and legally binding.

How Digital Signing Works

When you are ready to sign the Reseller Partner Agreement, navigate to the Contracts section of your reseller dashboard. The agreement will be displayed with a "Sign" button. Clicking this button initiates the digital signing process.

You will be asked to confirm your identity and acknowledge that you have read and understood the terms. Once confirmed, your digital signature is applied to the document along with a timestamp. The signed agreement is stored securely within the platform, and a copy is sent to your registered email address.

Legal Validity

Digital signatures created through the GDPR4All platform are compliant with eIDAS (the EU regulation on electronic identification and trust services) and are recognised as legally binding across EU and EEA member states. Each signature includes a cryptographic hash that ensures the document has not been altered after signing.

Generating Client Service Agreements

As you onboard new clients, you will need service agreements that define the terms of your relationship with each client organisation. GDPR4All provides a built-in agreement generator to streamline this process.

Creating a Client Agreement

From the client's detail page, click "Generate Agreement". The platform will produce a service agreement pre-populated with the client's organisation details, your reseller information, and the billing plan assigned to that client. The agreement covers:

Scope of services — the GDPR compliance modules and support services included in the client's subscription.
Pricing and payment terms — the fees, billing cycle, and payment methods as defined by the billing plan.
Data protection — a data processing agreement section outlining how personal data will be handled, sub-processor information, and data subject rights.
Service levels — platform availability commitments and support response times.
Term and termination — contract duration, renewal provisions, and grounds for early termination.

You can review and customise the generated agreement before sending it to the client for signature. Any customisations you make are preserved in the platform's records.

Sending for Client Signature

Once you are satisfied with the agreement, click "Send for Signature". The client's primary contact (CLIENT_ADMIN) will receive an email with a link to review and sign the agreement digitally. The signing process for clients mirrors your own — they review the document, confirm their identity, and apply their digital signature.

Tracking Signature Status Across All Clients

Managing contracts across a growing client portfolio requires visibility. The Contracts section of your reseller dashboard provides a consolidated view of all agreements and their current status.

Status Types

Each agreement is assigned one of the following statuses:

Draft — the agreement has been generated but not yet sent for signature.
Pending Signature — the agreement has been sent to the client and is awaiting their signature.
Signed — both parties have signed the agreement, and it is now active.
Expired — the agreement's term has ended without renewal.
Terminated — the agreement has been terminated early by either party.

Filtering and Alerts

You can filter your agreement list by status to quickly identify any contracts that require attention. The platform also generates alerts for agreements that are approaching their expiry date, giving you time to initiate renewal discussions with your clients.

PDF Download and Blockchain Verification

Every signed agreement can be downloaded as a PDF document directly from the platform. The PDF includes the full agreement text, both parties' signatures, timestamps, and a unique document reference number.

Blockchain Verification

For added assurance, GDPR4All anchors the cryptographic hash of each signed agreement to a public blockchain. This creates an immutable, independently verifiable record that the document existed in its current form at the time of signing.

To verify an agreement, navigate to the contract's detail page and click "Verify". The platform will compare the document's hash against the blockchain record and confirm whether the document is authentic and unaltered. This feature is particularly valuable in dispute resolution scenarios or when demonstrating the integrity of your contractual records to auditors.

When you need to share a signed agreement with a third party — such as an auditor, legal advisor, or regulatory authority — you can provide the PDF along with the blockchain verification reference. The third party can independently confirm the document's authenticity using the verification link included in the PDF.

Best Practices for Contract Management

Generate agreements promptly. Create and send client service agreements as part of your standard onboarding process. Delaying contract execution creates unnecessary legal risk and can lead to disputes about terms.
Review agreements before sending. While the platform pre-populates agreements with accurate data, always review the generated document to ensure it reflects any special terms or conditions you have discussed with the client.
Monitor expiry dates. Set a reminder to review contracts approaching expiry at least 30 days in advance. Early renewal discussions demonstrate professionalism and reduce the risk of service gaps.
Keep a local copy. Although all agreements are stored securely within the platform, we recommend downloading and archiving PDF copies in your own document management system as an additional safeguard.
Use the verification feature. When clients or auditors ask for proof of contractual arrangements, the blockchain verification feature provides a level of assurance that goes beyond a simple PDF download. It demonstrates your commitment to transparency and document integrity.