What the DPA is
A Data Processing Agreement (DPA) is the contract that sets out how Prosidir processes personal data on your behalf. When you put disciplinary case material into Prosidir — your employees’ information, hearing recordings, evidence — you are the responsible party (controller) and Prosidir acts as your operator (processor). The DPA puts that relationship in writing, which your own POPIA compliance will want.
What it covers
- The subject matter, nature and purpose of the processing — running your disciplinary processes.
- The types of personal data (including employee and hearing data) and categories of data subjects.
- Our obligations as your processor: confidentiality, security, and processing only on your instructions.
- The use of sub-processors, including our AI providers and the never-used-for-training commitment.
- How we assist with data-subject requests and breach notification.
- Safeguards for cross-border transfers.
- Return and deletion of data at the end of the agreement — the export-and-delete commitment.
How to get it
Because a DPA is signed between you and Prosidir, we provide it on request rather than posting it publicly.
Request the DPA