Subject matter & duration
Processing is performed for the purpose of providing the Workspace HR service and continues for the duration of the subscription.
Last updated: May 1, 2026
This DPA forms part of the agreement between Workspace HR ('Processor') and the customer ('Controller') and governs processing of personal data on the customer's behalf.
Processing is performed for the purpose of providing the Workspace HR service and continues for the duration of the subscription.
An up-to-date list of sub-processors is available on request. We will provide prior notice of any new sub-processors.
Where personal data is transferred outside the EEA / UK we rely on Standard Contractual Clauses and additional safeguards.
We maintain a written information security program covering encryption, access controls, monitoring, vulnerability management and incident response.
Customers may request our latest SOC 2 Type II report once per year under NDA in lieu of on-site audits.