Legal and trust
Data processing addendum
This public summary describes the production DPA structure available to business customers.
Last updated August 16, 2026Roles and instructions
For customer-controlled inspection and workforce data, the customer acts as controller and the service acts as processor on documented instructions.
Security and subprocessors
The processor maintains appropriate technical and organizational measures and contracts subprocessors for hosting, storage, email, monitoring and billing. Production order forms identify regions and the current subprocessor list.
Requests and incidents
We assist with verified data-subject requests, security incidents, deletion and export according to the service agreement. Customers remain responsible for responding to individuals and regulators.
Transfers and deletion
Cross-border transfers use an approved transfer mechanism where required. On termination, customer data is returned or deleted subject to backups, legal holds and documented retention periods.