Data Processing Addendum

This addendum describes how personal data is processed on your behalf when you use the service to store information about your customers, sites, jobs and employees.

[To be written by counsel: Whether your organization is the Personal Information Controller and the platform is the Personal Information Processor for the personal data stored on your behalf, or some other arrangement — unresolved (open question Q17).]

See the Privacy Policy for the categories of personal data the product stores.

[To be written by counsel: An exhaustive, addendum-level list, if one is required beyond the Privacy Policy.]

[To be written by counsel: Confidentiality, instructions-only processing, and the security measures the platform commits to.]

Expected to include hosting and infrastructure providers, an email/SMS delivery provider, and, once selected, a payment gateway.

[To be written by counsel: The complete, named list and how tenants are notified of a change.]

[To be written by counsel: How the platform helps a tenant respond to a data subject's request under RA 10173.]

[To be written by counsel: Notification timelines and process, aligned with National Privacy Commission (NPC) breach notification rules.]

[To be written by counsel: Where data is hosted and processed, and the safeguards that apply.]

[To be written by counsel: What happens to your data when the addendum or your subscription ends.]

[To be written by counsel: Liability allocation between the parties for this addendum.]

[To be written by counsel: How to reach us about this addendum.]