> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.mysmtp.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Processing Agreement (DPA) for GDPR Compliance

> Learn what a GDPR Data Processing Agreement is, why you need one with mySMTP, and how to download and sign the English or Danish DPA.

Under GDPR Article 28, any organization that processes personal data on behalf of a controller must have a Data Processing Agreement (DPA) in place. mySMTP acts as a processor for your email delivery, so controllers need a signed DPA to meet their compliance obligations.

## Why you need a DPA with mySMTP

When you send emails through mySMTP, the service processes email addresses, message content, attachments, and sending logs on your behalf. The GDPR requires a written contract (DPA) that sets out the subject matter, duration, nature and purpose of processing, and the obligations and rights of the controller.

## Download the DPA

<CardGroup cols={2}>
  <Card title="English DPA" icon="file-contract" href="https://mysmtp.com/dpa">
    Download the English version of the mySMTP Data Processing Agreement.
  </Card>

  <Card title="Danish DPA" icon="file-contract" href="https://smtp.dk/dpa">
    Download the Danish version of the mySMTP Data Processing Agreement.
  </Card>
</CardGroup>

## How to sign or accept the DPA

<Steps>
  <Step title="Download the DPA">
    Choose the language version above that applies to your organization.
  </Step>

  <Step title="Read the terms">
    Review the processing details, subprocessor provisions, and security measures described in the document.
  </Step>

  <Step title="Sign or accept">
    Follow the instructions provided on the DPA page to sign or accept the agreement.
  </Step>

  <Step title="Keep for your records">
    Retain a copy of the signed or accepted DPA for your GDPR documentation.
  </Step>
</Steps>

## Where mySMTP stores your data

All SMTP infrastructure, including servers, email content, attachments, and sending logs, is hosted in the EU. mySMTP does not use US cloud services for SMTP infrastructure.

## Questions about the DPA

If you need changes to the standard DPA or have compliance questions, contact [support@mysmtp.com](mailto:support@mysmtp.com).

## Related articles

* [GDPR & Data Protection](/security-compliance/gdpr-and-data-protection)
* [Security & Compliance overview](/security-compliance)
* [Contact support](/support/contact-support)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.