Data processing agreement

Scope

This Data Processing Agreement (DPA) applies when your organization engages Vertana to process candidate personal data on your behalf. You remain the controller; Vertana acts as processor for assessment delivery, scoring, and integrity signals.

Processing instructions

Vertana processes candidate data only to provide the assessment services you configure — including invitations, submissions, results, and optional integrity monitoring with consent.

• No sale of candidate personal data.
• Subprocessors limited to infrastructure required to run the service (e.g. hosting, database, email).
• Deletion or export available on request for Custom customers.

Security & retention

We maintain administrative and technical safeguards appropriate to the risk. Retention defaults follow your configured assessment settings and published privacy schedules unless a custom retention window is agreed in writing.

Contact

To execute a DPA for your organization, contact [email protected] with your company name, billing contact, and desired retention terms.