Company ABC has entered into a marketing agreement with Company XYZ, whereby ABC will share some of its customer information with XYZ. However, XYZ can only contact ABC customers who explicitly…

A BPA formally defines the roles, responsibilities, and limitations within a business partnership, including which customer data may be shared and under what conditions it may be used. The opt-in restriction - that XYZ may only contact customers who explicitly consented to third-party contact - is a contractual constraint between partners that belongs in a BPA rather than a technical or confidentiality agreement. This distinguishes BPA from the other agreement types, which do not address active data usage rights.

An ISA (Interconnection Security Agreement) defines the technical and security requirements for connecting two organizations' IT systems, not the business terms governing data sharing or usage rights.

An NDA (Non-Disclosure Agreement) obligates parties to keep information confidential but does not define how data may be actively used, shared, or leveraged in a marketing context.

An SLA (Service Level Agreement) specifies measurable performance and availability targets for a service and does not address data sharing permissions or marketing contact restrictions.