Draft and review Data Processing Agreements (DPA) with operadores under LGPD Art. 39. Use when user mentions 'DPA', 'contrato com operador', 'cláusulas LGPD', 'data processing agreement', or onboarding a new third-party service (analytics, cloud, payment, email, SMS, observability). Outputs DPA template + per-vendor sheets in `.lgpd/vendors/`.
The English summary is being prepared. Showing the original description.
Run score Not tested
See how to installReview the instructions the agent will receive before you install.
Interaction Localization Rule: When locale: pt-BR (or user speaks Portuguese), ALL questions (AskUserQuestion / sk_question), confirmation prompts, and selectable options MUST be translated and presented in Brazilian Portuguese (PT-BR). Any English question text or options in this skill are illustrative examples — NEVER display English questions or options to a Portuguese developer. Internal reasoning, code synthesis, tests, and technical documentation MUST remain in English (except Brazilian statutory compliance documents under .lgpd/).
Contrato entre controlador e operador. Sem cláusulas adequadas, controlador responde pelo operador (Art. 42).
Ver assets/dpa-template.md.
| Vendor | DPA público | Cláusulas BR | Ação |
|---|---|---|---|
| AWS | sim — AWS GDPR DPA + adendo BR | parcial | adotar cláusulas Res. 19/2024 |
| GCP | sim | parcial | mesmo |
| Datadog | sim | não | exigir adendo BR |
| Stripe | sim | sim | revisar para LGPD |
| Discord | termos de serviço | não | considerar contato direto se uso for comercial |
| Sentry | sim | parcial | exigir adendo |
saas-lgpd-vendor-audit).lgpd/vendors/{vendor}.md## F14 — DPA ✓
- {N} operadores ativos
- {M} com DPA assinado e aderente
- {X} pendentes: {lista}
- Próximo: saas-lgpd-international-transfer
No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Turn your AI session into an autonomous SaaS and software engineering studio with 49 specialized agents, 74 workflow skills (/saas-*), 28 director gates, and complete architecture across Next.js, FastAPI, Supabase, Tailwind, and Stripe.
The English summary is being prepared. Showing the original description.
Brownfield audit — do existing artifacts actually work? Numbered migration plan. Unlike /saas-project-stage-detect, checks compliance not existence.
The English summary is being prepared. Showing the original description.
Create an ADR documenting a technical decision: context, alternatives considered, consequences.
The English summary is being prepared. Showing the original description.
Traceability matrix mapping PRD requirements to ADRs. Finds gaps, cross-ADR conflicts, stack compatibility. PASS/CONCERNS/NOT ASSESSED/FAIL.
The English summary is being prepared. Showing the original description.
Audit assets against naming conventions, file size budgets, format standards. Finds orphaned assets, missing references.
The English summary is being prepared. Showing the original description.
Author per-asset visual specs, SVG dimensions, and generation prompts from PRDs and design tokens. After design tokens.
The English summary is being prepared. Showing the original description.