Generate your data processing agreement here

What this document is and when you need it

When you enter a worker’s name, their training record or a contractor’s work permit into our panel, those data remain yours: you are the controller. We only store them and show them back to you when you log in: we are the processor. The GDPR requires that relationship to be in writing, and the writing must say exactly what we do with the data, who we work with and what happens the day you leave.

This is not a formality: it is the document an inspector will ask you for, not us. That is why it sits here in the open, before you buy anything and without leaving us your email. Download it, run it past your legal adviser and decide afterwards.

If you are already a customer you need not do anything here: the same agreement is generated automatically when your company is set up and sits in your panel as a PDF from day one.

Your details

Nothing you type here leaves your browser. There is no upload, no storage and no analytics: close this tab without generating the document and nothing remains anywhere.

The agreement is issued in Spanish or in English. We do not machine-translate it into other languages: a binding text does not go through a translator without a lawyer reading it, and we would rather say so than pretend otherwise.

What the agreement says, in four lines

• We process your data only on your instructions, never for our own purposes, never for advertising and never to train artificial-intelligence models.
• If there is a security breach in our infrastructure we notify you within 24 hours of detecting it, risk or no risk, so that 48 of your 72 hours under article 33 are still left.
• The list of sub-processors is in annex III, with name and country. If we change one we tell you 30 days in advance and you may object.
• On termination you choose: we return everything in an open format or we delete it. Either way we delete afterwards and confirm it in writing. Your data are not a hostage to renewal.