Legal
Data Processing Agreement
Last updated: Early access draft
This is placeholder text for early access. It has not been reviewed by counsel and will be replaced with final legal terms before general availability.
This page summarizes the Data Processing Agreement ("DPA") available to organizations using Talent to process personal data on their behalf, such as candidate information submitted through a hiring pipeline.
1. Roles
Your organization acts as the data controller for candidate and employee data you manage on the platform. We act as a data processor, processing that data on your instructions.
2. Sub-processors
We use a limited set of infrastructure and service sub-processors (such as hosting and email delivery) to operate the platform. A current list is available on request.
3. Security measures
Data is isolated by tenant, access is governed by role-based permissions, and key actions are recorded in an audit trail. See our security page for details.
4. Requesting a signed DPA
Enterprise customers who require a countersigned DPA should contact our team — we're glad to work through it as part of onboarding.