Template library

Third-party vendor agreement

Vendor terms that first classify the vendor — processor or independent fiduciary, per purpose — and attach the matching duty set automatically, with incident windows, audit rights and data-sized liability. For every vendor whose services touch personal data.

An original template, drafted against the DPDP Act, 2023 and DPDP Rules, 2025. Not legal advice — review with counsel before use.

One of 14 DPDPA document templates, drafted in-house against the Act and the Rules. Free to generate as a Word file — no account needed for the preview.

Drafted against G.S.R. 846(E); citations open the gazette text inline.

About this document

What it covers

The placeholders this template asks you to fill in.

[Agreement Date][Customer Organisation Name][Customer Registered Office][Vendor Name][Vendor Registered Office][Service Description][Audit Notice Period][Personnel Screening Standard][Incident Notice Hours][Interim Report Hours][Data Liability Cap][General Liability Cap][Insurance Minimum Amount][For low-risk engagements, the parties may substitute the reduced-risk annex at Schedule B with proportionate caps.][Change Accommodation Period][Jurisdiction City][Customer Signatory Name][Customer Signatory Title][Vendor Signatory Name][Vendor Signatory Title]

The document