Data Processing Terms

The operating commitments SafeWorks applies when processing personal information for a customer.

Effective date: July 22, 2026

Last updated: July 22, 2026

Instructions and purpose limitation

SafeWorks processes customer personal information only to provide, secure, support, and maintain the subscribed service, to follow documented customer instructions, and to comply with applicable law.

Confidentiality and access

Personnel and contractors with authorized access are subject to confidentiality obligations and receive access only when required for support, security, or service operation.

Security measures

Controls include layered access controls, workspace separation, protected file access, activity records, encrypted connections, and restricted administrative access.

Subprocessors

SafeWorks may use subprocessors for hosting, database, authentication, storage, billing, communications, and monitoring. SafeWorks remains responsible for selecting providers appropriate to the service and maintaining a current subprocessor record.

Requests and incidents

SafeWorks will reasonably assist customers with data-subject requests, security investigations, and legally required notifications. Confirmed incidents affecting customer data will be handled under the incident-response process.

Return, deletion, and audit information

At termination or documented request, SafeWorks will support reasonable export and deletion steps under the retention policy. Security and compliance information will be made available subject to confidentiality and reasonable scope.