Data processing

Roles of the parties

The client is the controller of its employees’ and candidates’ data. forhumans is the processor and processes the data only to deliver the contracted service.

Subject matter and duration

The processing covers human resources management in the platform and consulting services, and lasts for the term of the agreement plus statutory retention periods.

Data categories and data subjects

Identification, contact, contractual, pay, working-time, performance, training and document data of employees, candidates and, where applicable, dependants.

Security measures

Encryption in transit and at rest, per-client segregation, role-based access control, audit logging, backups with recovery testing, and an incident management policy with notification without undue delay.

Use of AI

AI features operate inside the processes configured by the client, with human approval for sensitive actions. Every action is recorded in the audit log. Client data is not used to train third-party models.

Sub-processing and transfers

We use the sub-processors listed on the relevant page. Transfers outside the European Economic Area, where they occur, are covered by standard contractual clauses.

End of contract

At the end of the agreement, data is returned in a structured format and deleted from active systems and backups within the defined periods, unless there is a legal obligation to retain it.

Questions about this document? Write to privacidade@wearefractional.ai and we reply within five working days.