A data processing agreement itself does not need to cost anything: reviewing whether an agreement that a customer or supplier sends you contains the right components can be done for free and without an account. As soon as you have an agreement drawn up, the price varies greatly: from a free template to several hundred euros for custom work by a lawyer, or a fixed amount per month as part of a system that also maintains and monitors the agreement.
What it costs exactly depends on three things: how many processors (the parties who process data on your behalf, such as your accounting software or email marketing tool) you have, whether you use a standard template or a custom agreement, and whether you make a one-time purchase or take out an ongoing service that keeps the agreements up to date. The GDPR itself does not mention a fee; the price therefore does not come from the law but from the market.
Where the amount comes from
The GDPR prescribes what must be included in a data processing agreement, but not what it may cost. Lawyers who draw up a custom agreement typically charge an hourly rate; software companies that offer a template or system charge a fixed amount or subscription. Free versions often exist because the basic information, such as what must be included by law and where that appears in the regulation, is intentionally kept accessible. In the knowledge base you can read which components a data processing agreement should contain, with the reference to the official text included.
What determines the price
The number of processors plays a major role: a freelancer with three SaaS tools has less work than a company with twenty suppliers, each with their own risk profile. The difference between template and custom work also counts: a template is cheaper but requires you to assess yourself whether it fits your situation, while custom work takes into account specific arrangements, such as transfers outside the EU or subcontractors that the supplier engages itself. Finally, it matters whether you make a one-time purchase of a document or take out an ongoing service: agreements become outdated when a supplier changes, a new tool is added, or the interpretation by the EDPB or the Dutch Data Protection Authority changes.
Free review versus having it drawn up
Many companies do not have to draw up an agreement themselves, but receive one sent by a customer who acts as a controller. In that case, the question is not what it costs to draw up, but whether what is there is complete and reasonable. That initial assessment can be done for free: frequently asked questions about what you do and do not need to sign provide an initial starting point, and checking a submitted agreement can be done without an account.
Drawing up an agreement yourself is possible, but requires you to know which components are mandatory and which arrangements fit your situation. An agreement that is incomplete offers little support on paper if something goes wrong with the processor. For companies that do not want to assess that risk themselves, a template with explanation is often a middle ground between free and fully custom work.
What a subscription adds
A system that maintains data processing agreements does more than just deliver the document: it links the agreement to your processing activity register, alerts you when an agreement is missing or outdated, and sends a notification as soon as something changes that affects your situation. That is the difference between paying a one-time amount for a document and continuously knowing whether your agreements are still correct. On the pricing page you can see what is charged per month for this and what is and is not included.
When a lawyer is still needed
For complex processing, data transfers to countries outside the EU, or a dispute with a supplier over the terms of an agreement, tailored legal advice is often the wisest step. A system or template provides structure and guidance, not individual advice; for assessing your specific situation, a lawyer or the Data Protection Authority remains the appropriate point of contact. On how it works you can read where the information on gdpria.eu comes from and where the line between guidance and advice lies.
Would you like to see where your business stands before spending money on an agreement? The free quick-scan provides an initial indication in a few questions, and creating a business account can be done without any obligations.