Data Processing Addendum

Last updated: 23rd December, 2025

This Data Processing Addendum (“DPA”) forms part of the agreement between Expert Hire (“Processor” or “Service Provider”) and the customer (“Customer” or “Controller”) governing the processing of Personal Data in connection with the use of the Expert Hire platform.

This DPA applies where Expert Hire processes Personal Data on behalf of the Customer and is intended to satisfy data protection requirements under applicable laws, including GDPR-style and U.S. privacy laws.

1. Definitions

Capitalized terms not defined in this DPA have the meanings set out in the Terms and Conditions or applicable agreement.

2. Roles of the Parties

  • The Customer is the Data Controller with respect to Personal Data uploaded, submitted, or otherwise provided by or on behalf of the Customer.
  • Expert Hire acts as a Data Processor or Service Provider and processes Personal Data solely on the Customer's documented instructions.
  • For self-serve individual users, Expert Hire may act as a Data Controller as described in the Privacy Policy.

3. Scope of Processing

Expert Hire may process Personal Data for the following purposes:

  • Providing and operating the Service
  • Candidate assessment and workflow support
  • Interview preparation and evaluation assistance
  • Communications and notifications
  • Security, support, and service improvement

Categories of Personal Data may include names, contact details, resumes, work history, interview responses, assessment outputs, and related metadata.

4. Customer Obligations

The Customer represents and warrants that:

  • It has lawful authority to collect and provide Personal Data to Expert Hire.
  • Required notices and consents have been provided to candidates and data subjects.
  • Processing instructions comply with applicable law, including employment and anti-discrimination laws.

5. Expert Hire Obligations

Expert Hire shall:

  • Process Personal Data only on documented instructions from the Customer
  • Ensure personnel are bound by confidentiality obligations
  • Implement appropriate technical and organizational security measures
  • Not sell or use Personal Data for purposes unrelated to the Service

6. Sub-Processors

The Customer authorizes Expert Hire to engage sub-processors to support service delivery, including for infrastructure hosting, AI processing, communications, analytics, and security.

Expert Hire will ensure sub-processors are bound by contractual obligations consistent with this DPA. A list of sub-processors may be provided to enterprise customers upon request or under separate agreement.

7. Data Subject Requests

Expert Hire will reasonably assist the Customer in responding to data subject requests, where applicable. Requests received directly by Expert Hire will be forwarded to the Customer unless legally prohibited.

8. Data Security

Expert Hire implements reasonable administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, loss, or disclosure.

9. Data Transfers

Personal Data may be processed in multiple regions depending on service availability. Where required, appropriate safeguards will be applied to international data transfers.

10. Data Retention and Deletion

Personal Data will be retained only as long as necessary to provide the Service or as required by law. Upon termination of the Service, Expert Hire will delete or return Personal Data in accordance with the applicable agreement, unless retention is legally required.

11. Audits

Upon reasonable request and subject to confidentiality obligations, Expert Hire may provide information necessary to demonstrate compliance with this DPA. On-site audits are subject to mutual agreement.

12. Liability

Liability arising from this DPA is subject to the limitations set forth in the Terms and Conditions or applicable agreement.

13. Precedence

In the event of a conflict between this DPA and the Terms and Conditions, this DPA shall prevail with respect to data protection matters. A separately executed agreement will take precedence over this DPA.

14. Contact

For questions regarding this DPA, contact contact@experthire.io.