Data Processing Agreement
Last updated 15 October 2026
Draft — under legal review before launch. Details in [brackets] are still to be confirmed.
Roles
For staff data you give us to manage lines, you are the controller and we are the processor.
Our commitments
Process data only on your documented instructions; keep it confidential; apply appropriate security; use subprocessors only as listed; help you with data subject requests; notify you of a personal data breach without undue delay; delete or return data at the end of the service.
Audits
We provide the information needed to show compliance, on reasonable notice.
Signing
Contact hey@heykolega.com for a signed copy.