Skip to content

Data Processing Addendum

Wrkbase's Data Processing Addendum: scope, sub-processors, security measures, and international transfer terms for customer data.

Last updated 22 July 2026

1. Scope

This Data Processing Addendum forms part of the Terms of Service between the organization using Wrkbase ("Customer", the data controller) and Wrkbase ("Processor") wherever Wrkbase processes personal data on the Customer's behalf as part of the service: employee records, attendance, chat content, and similar workspace data.

2. Subject matter and duration

Processing continues for the duration of the Customer's subscription, and for any period afterward during which the Customer's data is retained under the Privacy Policy.

3. Nature and purpose of processing

Wrkbase processes personal data solely to provide the service: storing and displaying workspace data, computing derived values (time tracked, performance scores, payment status), sending notifications the Customer has configured, and, where the Customer enables it, passing the minimum necessary data to the AI provider to generate a proposed action or a support answer.

4. Categories of data and data subjects

Typically: names, work email addresses, attendance and time records, task and performance data, and salary and payroll records the Customer chooses to store. Data subjects are the Customer's employees.

5. Sub-processors

Wrkbase uses infrastructure and service providers to run the platform (hosting, email delivery, and an AI provider for AI-assisted features), each bound by confidentiality and data-processing terms at least as protective as this Addendum. An up-to-date list is available on request.

6. Security measures

HTTPS encryption in transit, JWT-authenticated access, data-driven role-based permissions enforced server-side, and an immutable, database-trigger-enforced audit log of every action taken on Customer data.

7. Assistance with data subject rights

Wrkbase will assist the Customer in responding to data subject access, correction, or deletion requests to the extent the Customer cannot fulfil them directly through the product itself.

8. International transfers

Where personal data is transferred outside the Customer's region, Wrkbase relies on appropriate safeguards (such as Standard Contractual Clauses) as required by applicable data protection law.

9. Deletion on termination

On termination, the Customer's data remains accessible under the Free tier's limits unless the Customer requests export or deletion, consistent with the Privacy Policy.

10. Contact

For a signed copy of this Addendum or questions about it, contact support@mywrkbase.com.