Legal
Data processing agreement
A summary of the DPA that forms part of every RoleWise customer contract. The full document is provided during procurement.
Roles
The customer is the data controller for candidate and employee data. RoleWise is the data processor and acts only on documented instructions from the customer.
Scope of processing
Conducting candidate conversations, generating structured insight, storing candidate and employee records, and connecting post-hire outcomes to the original profile.
Data residency
Processing and storage take place in the UK or the EU, selected by the customer at onboarding. No candidate data is transferred outside those regions without a documented transfer mechanism.
Security measures
Encryption in transit and at rest, role-based access control, SSO, audit logging on every AI assessment, and SOC 2 Type II audited controls.
Sub-processors
A current list of sub-processors is maintained and provided with the DPA. Customers are notified before any new sub-processor is added.
Assistance and deletion
RoleWise assists with data subject requests, breach notification and impact assessments, and deletes or returns all customer data on termination.
Request the full DPA
Email hello@rolewise.uk and we will send the signed pack.