GDPR & Enterprise Privacy
Data Processing Agreement (DPA)
Review the terms governing personal data processing for Career Agents enterprise customers.
1. Scope and Applicability
This DPA applies to processing of personal data (e.g. resumes, profile information, audit history logs) submitted by enterprise users or team plan admins to the Career Agents platform services.
2. Roles and Responsibilities
Under data protection regulations (GDPR, CCPA), the enterprise client acts as the Data Controller, and Career Agents acts as the Data Processor. We process data strictly in compliance with controller instructions.
3. Technical and Organizational Security
We implement strict security measures to protect customer data:
- Data Encryption: Encrypted in transit using TLS 1.3 and at rest in our databases using AES-256 keys.
- Access Controls: Role-based access constraints limiting personnel check clearances to server databases.
- Sub-processing Rules: We utilize secure cloud providers (like Vercel and Supabase) adhering strictly to standard contractual clauses.