Data processing addendum (template)

Roles

Controller: the customer company that creates the organization and employee accounts.

Processor: the Pravio operator that hosts this software and processes attendance data only on the controller’s instructions.

Instructions

The processor may authenticate users, store attendance records, send them to the controller’s admin panel, close stale open sessions, and delete GPS coordinates after the controller’s retention setting.

The processor will not sell employee data or use it for advertising.

Security and subprocessors

Data is stored in the configured PostgreSQL database. Hosting, email, or database vendors used to run the product are subprocessors. List them in the signed DPA after counsel review.

This is a template

Attach a signed version (and SCCs or local clauses where required) before taking payment or processing EU/UK personal data at scale.