Under the GDPR, you may be required to sign a DPA. When does it apply to you? Two things must be true:
You need to be a professional with a WeTransfer account and using this account on behalf of a business.
In the transfer you send there is personal data, which is data that can identify an individual.
If these two things are true for you, the GDPR tells us to define the relationship that exists between you, as a professional user, and us, WeTransfer.
Technically, this requirement is up to the one responsible for the data. In our relationship, that's you, the end-user. You have a goal, a purpose, for the data you send. We are the processor, meaning we take care of your request, and we have no purpose of ourselves for your data.
If you'd like to go through the process of signing the DPA, you will be required to follow our process in full. To do so, you can reach out to us by submitting a ticket.