Data Processing Agreement

This Data Processing Agreement (“DPA”) describes how Cyberyami HRM processes personal data on behalf of its customers (the “Controller”) when they use the platform.

Note: this is a placeholder. The final DPA will be reviewed by counsel before launch and will replace this content. For an executed DPA today, contact us.

The customer is the data Controller; Cyberyami HRMacts as a Processor, processing personal data only on the customer's documented instructions and for the purpose of providing the service.

Processing is subject to the safeguards described on our Security page (encryption in transit and at rest, tenant isolation, access control). A current list of sub-processors is available on request.

We support data export and right-to-erasure workflows so the Controller can meet its GDPR and DPDP obligations. See our Privacy Policy for retention windows and the erasure process.

Email support@cyberyami.com to request a signed Data Processing Agreement for your organisation.