Legal

Data Processing Agreement

Summary for business customers · May 20, 2026

Roles

The customer organization is the data controller for employee monitoring data collected through WorkPulse. WorkPulse acts as a processor and processes personal data only on documented instructions from the customer.

Processing scope

  • Employee account and authentication data.
  • Session, activity, screenshot, and estimate records generated during WorkPulse use.
  • Administrative audit logs, consent records, and support feedback linked to the customer tenant.

Security measures

WorkPulse applies tenant isolation, role-based access, encrypted transport, audit logging, and configurable retention controls. See the Security page for technical details.

Subprocessors

Hosting, database, identity, and integration providers may process data on behalf of WorkPulse. Customers will be notified of material subprocessor changes.

Data subject requests

Customers are responsible for responding to employee requests. WorkPulse will provide reasonable assistance to export or delete tenant-scoped data upon written request.

Executed agreements

For a countersigned DPA or enterprise contract, contact legal@workpulse.com. See the deployment and onboarding guides in the repository documentation.