This Data Processing Addendum ("DPA") forms part of the Agreement between InstaHire, Inc. ("Processor") and the customer ("Controller") and reflects the parties' obligations under applicable data-protection laws, including the GDPR.
01Definitions
Capitalized terms have the meanings given in applicable data-protection law.
- Controller — the customer that determines the purposes of processing.
- Processor— InstaHire, processing personal data on the Controller's behalf.
- Personal Data — any information relating to an identified or identifiable person.
02Roles of the parties
The Controller determines the purposes and means of processing candidate and hiring data. InstaHire acts as Processor and processes Personal Data only on documented instructions from the Controller.
03Scope and purpose of processing
InstaHire processes Personal Data solely to provide the hiring platform — including job posting, candidate matching, AI screening, and analytics — for the duration of the Agreement.
04Sub-processors
The Controller authorizes InstaHire to engage vetted sub-processors. We maintain a current list and provide notice before adding new ones, giving you the opportunity to object.
| Sub-processor | Purpose |
|---|---|
| Cloud hosting provider | Infrastructure & storage |
| Email delivery provider | Transactional email |
| Analytics provider | Product analytics |
05International transfers
Where Personal Data is transferred outside the EEA, UK, or Switzerland, InstaHire relies on Standard Contractual Clauses and applies supplementary measures to ensure an adequate level of protection.
06Security measures
InstaHire implements appropriate technical and organizational measures as described in our Security overview, including encryption, access controls, and regular testing.
07Assisting with data-subject rights
InstaHire provides tools and reasonable assistance to help the Controller respond to requests from data subjects exercising their rights, and to fulfill obligations regarding breach notification and impact assessments.
08Return and deletion of data
On termination of the Agreement, InstaHire will, at the Controller's choice, return or delete all Personal Data within 90 days, except where retention is required by law.
09Contact us
Questions about this document? Reach our team at legal@instahire.careers or write to InstaHire, Inc., 548 Market St, San Francisco, CA 94104.