Data Processing Agreement

Data Processing Agreement | XPressScreening

Data Processing Agreement (DPA)

a. Purpose of Processing

XPressScreening.com processes candidate data on behalf of recruiters to facilitate asynchronous video screening, transcription, and scoring.

b. Roles

  • Controller: Recruiter, recruitment agency, or hiring company using the platform.
  • Processor: XPressScreening.com.

c. Categories of Data

Candidate names, contact information, video recordings, transcripts, employment data, and any data provided by recruiters necessary for screening.

d. Processor Obligations

  • Process personal data only per documented instructions from the Controller.
  • Ensure confidentiality and security of data through technical and organizational measures.
  • Assist the Controller in responding to data subject requests.
  • Notify the Controller of any data breach without undue delay.
  • Upon termination, delete or return personal data per the Controller’s instructions unless required by law.

e. Sub-Processors

The Processor may engage sub-processors for transcription, hosting, and AI processing, ensuring equivalent data protection obligations.

f. International Transfers

Data transfers outside the Controller's jurisdiction will have appropriate safeguards, including Standard Contractual Clauses where required.