Data processing agreement
Terms that apply when Clarity HR processes personal data on behalf of a customer.
Draft. This document is a working outline and is not yet in effect. The final version will be published before general availability and reviewed by counsel.
1. Roles
The customer is the controller; Clarity HR is the processor and acts only on documented instructions.
2. Sub-processors
We use cloud infrastructure and email providers as sub-processors. The current list will be published here and customers will be notified of changes.
3. Security measures
Encryption in transit and at rest, role-based access, audit logging, and tested backups, as described on the security page.
4. Assistance and deletion
We assist customers with data subject requests and delete or return data at the end of the agreement.