Data Processing Addendum
Wrkbase's Data Processing Addendum: scope, sub-processors, security measures, and international transfer terms for customer data.
Last updated 22 July 2026
1. Scope
This Data Processing Addendum forms part of the Terms of Service between the organization using Wrkbase ("Customer", the data controller) and Wrkbase ("Processor") wherever Wrkbase processes personal data on the Customer's behalf as part of the service: employee records, attendance, chat content, and similar workspace data.
2. Subject matter and duration
Processing continues for the duration of the Customer's subscription, and for any period afterward during which the Customer's data is retained under the Privacy Policy.
3. Nature and purpose of processing
Wrkbase processes personal data solely to provide the service: storing and displaying workspace data, computing derived values (time tracked, performance scores, payment status), sending notifications the Customer has configured, and, where the Customer enables it, passing the minimum necessary data to the AI provider to generate a proposed action or a support answer.
4. Categories of data and data subjects
Typically: names, work email addresses, attendance and time records, task and performance data, and salary and payroll records the Customer chooses to store. Data subjects are the Customer's employees.
5. Sub-processors
Wrkbase uses infrastructure and service providers to run the platform (hosting, email delivery, and an AI provider for AI-assisted features), each bound by confidentiality and data-processing terms at least as protective as this Addendum. An up-to-date list is available on request.
6. Security measures
HTTPS encryption in transit, JWT-authenticated access, data-driven role-based permissions enforced server-side, and an immutable, database-trigger-enforced audit log of every action taken on Customer data.
7. Assistance with data subject rights
Wrkbase will assist the Customer in responding to data subject access, correction, or deletion requests to the extent the Customer cannot fulfil them directly through the product itself.
8. International transfers
Where personal data is transferred outside the Customer's region, Wrkbase relies on appropriate safeguards (such as Standard Contractual Clauses) as required by applicable data protection law.
9. Deletion on termination
On termination, the Customer's data remains accessible under the Free tier's limits unless the Customer requests export or deletion, consistent with the Privacy Policy.
10. Contact
For a signed copy of this Addendum or questions about it, contact support@mywrkbase.com.