Title: Data Processing Agreement for multiple clients
Last modified: May 23, 2018

---

# Data Processing Agreement for multiple clients

 *  Resolved [Mariette](https://wordpress.org/support/users/mariette-jackson/)
 * (@mariette-jackson)
 * [8 years ago](https://wordpress.org/support/topic/data-processing-agreement-for-multiple-clients/)
 * Hi
 * I have built websites for multiple clients. I administer these websites and have
   installed Wordfence on all of them. Can I check – do I need to sign and return
   the DPA (once) or does each client need to sign one each?
 * I hope the former!
 * thanks

Viewing 4 replies - 1 through 4 (of 4 total)

 *  [MNX](https://wordpress.org/support/users/mononox/)
 * (@mononox)
 * [8 years ago](https://wordpress.org/support/topic/data-processing-agreement-for-multiple-clients/#post-10312887)
 * This depends on the contractual relationship you assume on these websites.
 * – If you’re a co-controller you can sign the DPA on behalf of them.
    (You’re 
   mentioned in the privacy policy as the the controller of the data collection)
 * – If you’re a processor then you may add Defiant Inc. as a sub-processor.
    (You’re
   mentioned in the privacy policy as the processor of the data collection)
 * – If you’re neither you would pass this on to your clients respectively.
    (You
   remain anonymous in the privacy policy, unless identification is required by 
   other things, such as access to private data)
 *  Thread Starter [Mariette](https://wordpress.org/support/users/mariette-jackson/)
 * (@mariette-jackson)
 * [8 years ago](https://wordpress.org/support/topic/data-processing-agreement-for-multiple-clients/#post-10312991)
 * Thank you. I think the second option would apply.
 * In that case, do I need to sign a DPA with Wordfence?
 * And if yes, would that be one for DPA or a separate one for each client’s website?
 * Sorry for my ignorance.
 *  [MNX](https://wordpress.org/support/users/mononox/)
 * (@mononox)
 * [8 years ago](https://wordpress.org/support/topic/data-processing-agreement-for-multiple-clients/#post-10314228)
 * Yes, sign the DPA (needs to be signed twice in the document) and send it to [privacy@defiant.com](https://wordpress.org/support/topic/data-processing-agreement-for-multiple-clients/privacy@defiant.com?output_format=md)–
   After that, you have a legal basis to process personal data on behalf of your
   clients.
 *  Thread Starter [Mariette](https://wordpress.org/support/users/mariette-jackson/)
 * (@mariette-jackson)
 * [8 years ago](https://wordpress.org/support/topic/data-processing-agreement-for-multiple-clients/#post-10314535)
 * Great, thank you very much for your help with this.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Data Processing Agreement for multiple clients’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

 * 4 replies
 * 2 participants
 * Last reply from: [Mariette](https://wordpress.org/support/users/mariette-jackson/)
 * Last activity: [8 years ago](https://wordpress.org/support/topic/data-processing-agreement-for-multiple-clients/#post-10314535)
 * Status: resolved