Data Processing Addendum

PHELTIX is designed for enterprise deployments where employee personal data may be processed on behalf of a customer organization (the “Customer”). In those cases, PHELTIX typically acts as a data processor and the Customer acts as the data controller.

We can provide and execute a Data Processing Addendum (DPA) as part of a Master Services Agreement (MSA) or Early Access Agreement. The DPA generally covers topics such as:

• Processing instructions and roles (controller/processor)
• Security measures and incident response commitments
• Subprocessor obligations and transparency
• Data retention and deletion on termination
• International transfers (where applicable)
• Assistance with data subject requests (where applicable)