Data processing addendum

You are the controller of employee personal data in your workspace. TalentOS is the processor and processes it only on your documented instructions, which include your use of the product's features.

Processing lasts for the term of your subscription plus the deletion window described below.

• Hosting and storing employee records and uploaded documents.
• Extracting skills and generating digital twin summaries using AI models.
• Computing workforce analytics: skill strength, coverage gaps, risk, readiness, and planning scenarios.
• Producing exports and reports you request.

• Data subjects: your employees, contractors, and candidates you choose to record.
• Data: identity and contact details, employment details, role and department, skills and proficiency, resume content, and activity signals from systems you connect.
• You must not upload special-category data unless you have an explicit lawful basis and have told us in writing.

• Process only on your instructions and inform you if an instruction appears unlawful.
• Ensure personnel with access are bound by confidentiality.
• Implement the technical and organisational measures described in our Security overview.
• Assist you with data subject requests, DPIAs, and regulator engagement, taking into account the nature of processing.
• Make available the information needed to demonstrate compliance and allow reasonable audits, no more than once a year unless required by a regulator.

You authorise the sub-processors listed in our Security overview. We will notify workspace owners before adding a new sub-processor, and you may object on reasonable data-protection grounds.

Transfers out of the EEA or UK are made under Standard Contractual Clauses with supplementary technical measures.

We will notify you without undue delay, and in any event within 72 hours of becoming aware, with the information available to us and the steps taken to contain and remedy the incident.

On termination you may export your data for 30 days. After that we delete or anonymise it, except where retention is required by law.

TalentOS produces decision-support outputs only. You must ensure meaningful human review before any decision with legal or similarly significant effects on an individual.