Hi, I have a question regarding the DPA you provided.

In the current template, Sumo Group Inc. (BreezeDoc) is listed both as the Data Controller (Company) and as the Data Processor.
As far as I know, under GDPR, these two roles cannot be fulfilled by the same entity in the same processing activity.

Could you please clarify whether this is a placeholder issue and update the DPA so that:

- the Data Controller section includes the customer’s details, and
- BreezeDoc is listed solely as the Data Processor?

I want to ensure the agreement correctly reflects the roles before signing.

Thank you!