Data Processing Agreement
Template DPA for organizations. The full signable template lives in docs/security/DPA_TEMPLATE.md.
Roles
The customer organization is the data controller; CareerFlyt is the processor, processing member data only on the organization's instructions to provide the service.
Processing scope
Member accounts, resumes and approved profile data, saved jobs, generated application materials, and usage/audit records.
Security measures
The technical and organizational measures described on the Security page: access controls, encryption, audit logging, malware scanning, and backups.
Sub-processing
Only the subprocessors listed on the Subprocessors page; notice given before changes.
Deletion & return
On termination, controller data is exported on request and deleted per the agreed retention schedule; individuals can also self-serve export and deletion.
Questions? Contact support. See also: Privacy · Terms · Security · Subprocessors · DPA · Data deletion