Pre-signed DPA: valid versions
Every page of a pre-signed DPA prints its version, the SHA-256 fingerprint of the DPA text and the template revision. A copy is a Better ISMS signed text only if its fingerprint is listed here. A fingerprint identifies the text; it does not prove a given PDF is unmodified. To check a copy, compare its clauses with the source published for that fingerprint (the fingerprint is the SHA-256 of that file's exact bytes).
Current PDF: better-isms-dpa-2026-10-26-r2-fed4cacb8b5a.pdf (file SHA-256 9305bbdc3c8bff0d9daa7c1cba9a2f8ee81ffc8942f1bb7ad38d87e8b624911c)
An offer in a signed copy lapses 60 days after a later version is published, or on the date a version is marked withdrawn here (DPA §7.4(f)).
| Version | Status | Fingerprint (SHA-256) | Source |
|---|---|---|---|
| 2026-10-26-r2 | current approved for issue on 2026-10-26 | fed4cacb8b5a5dd21ef8c6fa5dc02fbb180963a591c08bf784f7b150f2909c27§3.3 lists the in-transit measure as encryption in transit (TLS 1.3). No change to processing, sub-processors, retention or transfers. | dpa-2026-10-26-r2.md |
Cover and signature page template revisions:
- Revision 1: draft, never issued, not published
- Revision 2: dpa-template-r2.txt (text SHA-256
e08f8ad6e53488ab337434f9f7cff78cc572ea92f0df33f3d35547fe78ccab87)