Governance & Compliance
Data Processing Agreement
Also: DPA
A contract in which a vendor agrees how it will handle personal data on your behalf.
In more detail
It covers purposes, security measures, sub-processors, breach notice, deletion and transfers. Review it for any AI vendor that sees prompts or logs.