

Explore all the solutions you can create with Paperform: surveys, quizzes, tests, payment forms, scheduling forms, and a whole lot more.
See all solutions











Connect with over 2,000 popular apps and software to improve productivity and automate workflows
See all integrations
Explore all the solutions you can create with Paperform: surveys, quizzes, tests, payment forms, scheduling forms, and a whole lot more.
See all solutions
Connect with over 2,000 popular apps and software to improve productivity and automate workflows
See all integrations
When two or more organizations determine the purposes and means of personal data processing together, Article 26 of the GDPR requires a joint controller agreement. This template helps legal teams, compliance officers, and data protection professionals establish clear responsibilities between collaborating entities without starting from scratch.
Under GDPR Article 26, joint controllers must transparently arrange their respective responsibilities for compliance—particularly regarding data subject rights, security measures, breach notifications, and accountability. Without a documented agreement, both organizations face regulatory risk and potential fines.
This Joint Controller Agreement Form is designed for legal departments, DPOs (Data Protection Officers), compliance teams, and business leaders in the EU, UK, and any jurisdiction where GDPR applies. Whether you're partnering on research projects, marketing campaigns, event management, or service delivery, this form captures the essential details and creates an auditable record.
Paperform's document-style editor lets you blend legal language, structured questions, and conditional fields to gather exactly what you need. You can embed this form directly on internal portals, share it via secure link with potential partners, or integrate responses into your compliance management system.
Once submitted, use Stepper (stepper.io) to automate what happens next—route agreements for internal review, trigger contract generation workflows, notify relevant stakeholders, or sync details into your legal database. Combined with Papersign (papersign.com), you can turn completed agreements into legally binding eSignature documents, keeping the entire joint controller arrangement linked, traceable, and audit-ready.
Paperform is SOC 2 Type II certified and offers data residency controls, SSO, and role-based permissions—making it suitable for legal teams that need to meet high standards for data security and regulatory compliance. While Paperform itself is not a legal document repository, it integrates seamlessly with the tools you already use to store, track, and manage agreements.
Trusted by over 500,000 teams worldwide and featuring 30,000+ form templates, Paperform gives legal and compliance professionals the flexibility to create professional, on-brand forms without waiting on developers or external agencies.
A comprehensive GDPR-compliant agreement form for joint controllers to document shared data processing responsibilities, allocate obligations, and ensure transparent compliance under Article 26 of the GDPR.
Notify data subjects of privacy policy changes and collect updated consent in compliance with GDPR requirements. Ensure transparent communication and maintain regulatory compliance.
Comprehensive GDPR compliance documentation form for data controllers to record policies, procedures, training records, and audit results demonstrating accountability under EU data protection law.
Document controller/processor assistance and cooperation with supervisory authorities during GDPR investigations and compliance checks under Article 31.
A comprehensive form for multinational groups to apply for Binding Corporate Rules (BCR) approval, enabling compliant intra-group personal data transfers across borders under GDPR requirements.
A comprehensive form for renewing data processor agreements under GDPR Article 28, capturing updated processing activities, security measures, and compliance requirements for EU data protection.
A comprehensive GDPR Article 17 erasure request form enabling individuals to exercise their right to be forgotten, with reason selection, data category specification, and verification workflow.
A privacy-first form to map, document, and audit consent touchpoints across your customer journey, ensuring GDPR compliance at every stage of the customer lifecycle.
Notify customers of business ownership transfer and obtain consent for data processing continuity under new data controller, with clear opt-out rights per GDPR requirements.
A comprehensive form for documenting personal data processing activities and data flows across systems to maintain Article 30 GDPR Records of Processing Activities (RoPA) compliance.
Log and track data deletion activities, responsible parties, and compliance with GDPR retention schedules. Maintain a comprehensive audit trail for regulatory oversight and internal accountability.
Allow data subjects to formally object to processing based on legitimate interests under GDPR Article 21, with space to specify compelling grounds and personal circumstances.