Back to landing
GDPR & CCPA Compliance

Data Processing Agreement (DPA)

Effective Date: August 15, 2026

1. Scope and Applicability

This DPA governs the processing of candidate data (resumes, interview audio logs, GitHub portfolio metrics) submitted by enterprise customers and recruitment cohort teams to Career Agents hosted services.

2. Roles and Controller Safeguards

Under GDPR and CCPA regulations, the enterprise customer acts as the Data Controller, and Career Agents acts strictly as the Data Processor, executing instructions in accordance with candidate consent and contractual boundaries.

3. Technical Security Controls

All candidate data is protected using TLS 1.3 in transit and AES-256 encryption at rest, accompanied by strict local-first data isolation principles and role-based access control (RBAC).