Legal
Data processing addendum
The intended data-processing framework for customers and CorelyHR.
Roles
The final addendum will identify the organization as controller or equivalent customer role, and CorelyHR as processor or service provider where applicable.
Instructions and confidentiality
Processing will be limited to documented customer instructions, service delivery, security, support, and legal obligations, subject to the approved agreement.
Transfers and subprocessors
The final addendum will specify applicable transfer safeguards, subprocessors, audit rights, incident communication, and retention commitments.
Last reviewed: July 30, 2026 (draft)