Data Processing Addendum

Effective July 14, 2026

Roles

The workspace owner is the controller of candidate and recruiting data. DJob acts as a processor for hosted workspace operations.

Processing Instructions

DJob processes personal data only to provide the service, maintain security, support billing, perform backups, and comply with lawful instructions from the workspace owner.

Subprocessors

The service may use infrastructure, email, payment, AI, monitoring, and security subprocessors. Workspace owners should receive a current subprocessor list before broad production launch.

Security Measures

Baseline controls include authenticated admin access, role support, audit events, malware scanning hooks, retention metadata, backups, and provider-side payment isolation.

Deletion and Export

The admin API includes data subject export and privacy request records. Automated deletion should be enabled only after policy review and customer confirmation workflows are finalized.