Third-Party Data Protection Undertaking

Print two copies and ask your service provider to sign both. Give your service provider one copy for their reference and securely store the other copy until a year after you stop providing the service.