| Type of Vendor DPA | Jurisdictions covered by DPA | Transfer Mechanism: Standard Contractual Clause Modules 1 to 4 | Epicor is Data Controller or Data Processor | Vendor is Data Processor or Data Controller | Link to PDF |
| Controller to Controller | EU, UK and USA | Module 1 | Epicor is Data Controller | Vendor is also a Data Controller (or Joint Data Controller) (Professional Advisory Services/ Accountancy Services/ Health Care/Medical and/or Employment Services Providers and/or Subscription Services Providers) |
Professional Services Provider |
| Controller to Processor | EU, UK and USA | Module 2 | Epicor is Data Controller | Vendor is Data Processor | Controller to Processor vendor DPA |
| Processor to Processor | EU, UK and USA | Module 3 | Epicor is Data Processor | Vendor is Epicor’s Sub-Processor | Processor to Processor vendor DPA |