NDA & DPA templates

Last updated: July 2026

Before you show anyone your cost data, you should know exactly how it will be treated. Our standard documents are short, mutual, and available before you commit to anything — read them first, sign only when you are ready. Requested documents are sent within one business day.

The mutual NDA

The NDA is mutual: it binds us exactly the way it binds you. It applies from the moment either side shares something non-public — typically before the savings check, and always before the secure document upload is opened for your cost exports.

Read the full mutual NDA template →

It covers:

  • Confidentiality in both directions — your cost data, architecture, and commercial terms; our methods, tooling, and findings.
  • Purpose limitation — shared information is used to evaluate and deliver the engagement, nothing else.
  • Survival — the NDA stands whether or not an engagement follows. If you walk away after the savings check, it still protects everything shared.

The DPA

The data processing agreement applies whenever we process personal data on your behalf — for example, cost exports or resource tags that contain user names or identifiers. Think of it as the GDPR Article 28 layer on top of the NDA.

Read the full DPA template →

It defines:

  • Processing scope and instructions — what we process, for what purpose, and only on your documented instructions.
  • Sub-processors — who they are, and your right to be notified before anything changes.
  • Security measures — encryption at rest, access logging, least-privilege access, storage outside the public web root.
  • Deletion and return — your data is deleted or returned when the engagement ends, and on request at any time.

Working under your own NDA? The one-way NDA

Some clients prefer their own NDA for their information — that is fine, and we sign it. When an engagement then proceeds beyond the initial assessment, we share how we work: our methodology, report and document templates, and commercial terms. For that we ask you to sign our short one-way NDA covering our side only. It never restricts your own results — the findings, figures, and recommendations about your estate are yours.

Download the one-way NDA (Word) →  fillable PDF →

Counting-rules templates

Also available on request: the counting rules that define how verified savings are measured — the baseline, the verification window on your real Azure invoice, and what is excluded, such as usage changes and provider price moves. Because our fee is paid out of verified savings, the counting rules are the fee basis. You should see exactly how “verified” is defined before anything starts — in writing, before you sign.

How to request them

  • Email contact@valor-co.com and name the documents you want — NDA, DPA, counting rules, or all three.
  • Or tick the documents box in the funnel when you request your savings check, and they arrive with our reply.

Sent within one business day · Mon–Fri 08:00–17:00 CET.