Draft
Data processing addendum.
Effective: 2026-04-19 · Version: 0.1 (pre-launch stub). Final DPA, reviewed by outside counsel, will replace this document by Q3 2026.
A full Data Processing Addendum is available under NDA for enterprise and design-partner evaluations. It incorporates:
- Standard Contractual Clauses (2021/914) for EU/UK data transfers
- Sub-processor list (maintained at /legal/privacy §5)
- Security measures aligned with SOC 2 control families (pre-audit documentation available under NDA; SOC 2 Type I audit target Q3 2026)
- Data-subject rights assistance
- Audit rights for tenant on reasonable notice
- Breach notification without unreasonable delay, within 72 hours of confirmed identification
How to get the current DPA for review
Email jon@certainhr.aiwith subject “DPA request” and your company name. A countersigned DPA is a standard part of our enterprise onboarding.
Draft
This document is a draft. The final version is under counsel review and will be posted before production launch. For enterprise reviews, email jon@certainhr.ai — we’ll send the counsel-reviewed version under NDA.