Data Processing Agreement (DPA)
Governs the processing of Personal Data by NoviHR on behalf of Customers.
Roles
Customer acts as Data Controller and Novixer acts as Data Processor except where otherwise required by law.
Processing
Personal Data is processed only on documented customer instructions and for delivering the contracted Services.
Security
Novixer implements appropriate technical and organisational measures including encryption, access controls, logging and secure backups.
Subprocessors
Approved service providers may be engaged under contractual confidentiality and security obligations.
Breach Notification
Confirmed personal data breaches affecting Customer Data will be communicated without undue delay.
Audit & Deletion
Reasonable audit assistance may be provided. Upon termination, Customer Data will be returned or deleted subject to legal obligations.