Data processing agreement (dpa) — found from the homepage — Humaans

Cited by

Facts read from this source

• DPA entity Report an error

  “between Humaans Software UK LTD (“Humaans”, “we”, “us”, “our”) and you (“Customer”, “you”, “your”)”

• DPA effective date Report an error

  “Effective: 6 October 2026”

• GDPR scope Report an error

  “including (a) the EU General Data Protection Regulation 2016/679 (the “EU GDPR”); (b) the UK GDPR as defined in The Data Protection, Privacy and Electronic Communications (Amendment Etc.) (EU Exit) Regulations 2019; (c) the Data Protection Act 2018 (“DPA 2018”); and (d) any applicable ePrivacy legislation”

• Controller processor roles Report an error

  “The Customer is the controller and Humaans is the processor in respect of Customer Personal Data processed under this DPA.”

• Breach notification hours Report an error

  “Humaans shall notify the Customer without undue delay and in any event within seventy-two (72) hours of becoming aware of the Security Incident.”

• Subprocessor notice days Report an error

  “Humaans shall provide the Customer with at least fourteen (14) days’ prior written notice of any proposed addition or replacement of Sub-Processors”

• Subprocessor objection days Report an error

  “The Customer may object to a new Sub-Processor by providing written notice to Humaans within fourteen (14) days of receiving notice under paragraph 7.4”

• Audit reports available Report an error

  “Humaans shall make its then-current SOC 2 Type II and ISO 27001 audit reports (or equivalent industry-standard certifications) available to the Customer upon written request, no more than once per year.”

• Dsr notification days Report an error

  “Humaans shall notify the Customer within five (5) Business Days of receiving any request from a data subject”

• Self service rights Report an error

  “The Services provide self-service functionality enabling the Customer to access, correct, delete, export and restrict processing of Customer Personal Data.”

• Dpia assistance Report an error

  “Humaans shall provide reasonable assistance to the Customer with any DPIA and any prior consultation with a supervisory authority”

• Return window days Report an error

  “The Customer may request the return of Customer Personal Data within thirty (30) days of termination or expiry of the Agreement.”

• Deletion SLA days Report an error

  “Humaans shall delete Customer Personal Data from production systems. All remaining copies of Customer Personal Data will be purged within ninety (90) days of deletion from production systems.”

• Deletion certificate Report an error

  “Upon written request from the Customer, Humaans shall provide written certification of the deletion of Customer Personal Data in accordance with clause 12.3.”

• No data sale Report an error

  “Humaans does not “sell” personal data (as that term is defined under the California Consumer Privacy Act or any similar legislation).”

• Encryption at rest Report an error

  “Customer Personal Data is encrypted at rest using AES-256 encryption via the cloud infrastructure provider.”

• Encryption in transit Report an error

  “All data in transit is protected using TLS 1.3 (with TLS 1.2 as a minimum).”

• MFA production access Report an error

  “Multi-factor authentication (MFA) required for access to production systems and administrative tools.”

• SSO enterprise Report an error

  “Single sign-on (SSO) supported for enterprise customers.”

• Penetration testing Report an error

  “Annual penetration testing conducted by qualified third parties.”

• Backup frequency Report an error

  “Daily backups of Customer Personal Data. Geographic redundancy for backup storage.”

• EU data residency Report an error

  “Customer Personal Data stored in Humaans’ application databases and file storage is hosted in the EU.”

• Cloud provider Report an error

  “The underlying cloud infrastructure (Google Cloud Platform) is SOC 2 and ISO 27001 certified.”

• Certifications held Report an error

  “SOC 2 Type II certification maintained. ISO 27001:2022 certification maintained.”

• AI default region Report an error

  “By default, Customer Personal Data processed by AI features within Humaans is processed within the EEA or Switzerland. Customers may agree with Humaans to use US processing instead.”

• AI multi provider Report an error

  “Humaans uses multiple AI Sub-Processors to reduce dependency on any single provider and to select providers and models suited to each feature”

• AI processing regions enforced Report an error

  “Where a provider or model cannot meet the applicable regional processing requirement, Humaans will not use that provider or model to process the Customer’s Personal Data.”

• GDPR page available Report an error

  “GDPR Security Trust center Legal Cookie settings Terms Privacy DPA DORA”

• Company locations Report an error

  “London Fora - Chancery House, 53-64 Chancery Ln, London WC2A 1QS New York City 169 Madison Ave STE 11640 New York, NY 10016 San Francisco 2261 Market Street STE 4153 San Francisco, CA, 94114”

• Copyright entity Report an error

  “Humaans Inc. © 2026”

6 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Employee data protection & co-determination
• The Data Protection Officer European sovereignty
• The IT Integrator Employee data protection & co-determination
• The IT Integrator European sovereignty
• The Payroll Officer Employee data protection & co-determination
• The Payroll Officer European sovereignty
• The People Lead Employee data protection & co-determination
• The People Lead European sovereignty
• The Skeptic Employee data protection & co-determination
• The Skeptic European sovereignty
• The Works Council Advocate Employee data protection & co-determination
• The Works Council Advocate European sovereignty