Data Processing Agreement
For Enterprise customers, a custom DPA is available as part of your contract.
This Data Processing Agreement (“DPA”) supplements the Terms of Service for customers who process personal data through Sidian Workforce.
1. Roles
The customer is the controller of personal data it stores in Sidian. Sidian acts as a processor, unless otherwise agreed in writing.
2. Processing instructions
Sidian processes personal data only to provide, secure, and improve the services, and in accordance with documented instructions from the customer.
3. Subprocessors
Sidian may engage subprocessors for infrastructure, model providers, and support. A current list is available on request. Enterprise customers receive advance notice of material changes.
4. Security and confidentiality
Sidian implements appropriate technical and organizational measures to protect personal data and requires confidentiality commitments from personnel.
5. Data subject rights
Sidian will assist the customer in responding to data subject requests, including access, correction, deletion, and portability, to the extent technically feasible.