Map data locations and cross-border flows from a vendor data-processing agreement
Key facts
- Human involvement
- YellowClose supervision
- How AI is used
- List each processing location, subprocessor and transfer purpose named in the data-processing agreement. Do not label a transfer lawful or unlawful.
- What the lawyer must review
- There is no single federal adequacy regime. Rule 1.6 still forbids revealing client information, including by putting the agreement and its customer data into a public tool, unless informed consent, implied authority or a paragraph (b) exception applies. If the customer is a California business, compare the contract with Cal. Civ. Code § 1798.140(ag): a service provider must process under a written contract that prohibits selling or sharing, use beyond the stated business purposes, use outside the direct business relationship, and the combining the section describes. Formal Opinion 512 requires the lawyer to understand retention and training use before client data is entered into a tool.
- Written for / version
- United States versionUS
Who does what
| Role | What they do |
|---|---|
| Assistance | Consider narrowly defined preparation support after confirming the tool’s capability and permitted scope. |
| Lawyer | Set the scope, supervise the work closely, verify every part relied on, resolve omissions and exceptions, and approve the exact output. |
Checklist
- Open each relied-on authority independently. Confirm its existence, current status, proposition and any quotation or pinpoint reference.
- Review operative clauses in the complete document, including definitions, cross-references, schedules and inconsistencies with the instructions.
- Confirm that the actual tool, feature and processing terms permit use of this information, including access, retention, training and disclosure conditions.
- Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
- Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.
Forms and precedents for this task
| Form or precedent | Kind | AI use | Summary |
|---|---|---|---|
| CCPA service provider and contractor addendum | Agreement | AI use Yellow | Contract terms for a California service provider or contractor under Civil Code §§ 1798.100(d) and 1798.140. |
Signed-in accounts can read the full text of each one. All precedents.