Data Processing Agreement

Our commitment to protecting your data under GDPR and other data protection laws
November 13, 2025 v1.0

1. Purpose and Scope

This Data Processing Agreement (DPA) governs the processing of personal data by Snaply on behalf of the Customer in connection with the provision of time tracking services.

2. Definitions

  • Controller: The entity that determines the purposes and means of processing personal data
  • Processor: Snaply, which processes personal data on behalf of the Controller
  • Personal Data: Any information relating to an identified or identifiable natural person
  • Processing: Any operation performed on personal data

3. Data Processing Obligations

Snaply shall:

  • Process personal data only on documented instructions from the Customer
  • Ensure that persons authorized to process personal data are under confidentiality obligations
  • Implement appropriate technical and organizational measures
  • Assist the Customer in responding to data subject requests
  • Notify the Customer without undue delay of any personal data breach

4. Sub-processors

Snaply may engage sub-processors to process personal data. Current sub-processors include cloud hosting providers and payment processors. We will inform you of any changes to sub-processors.

5. Data Subject Rights

Snaply will assist the Customer in fulfilling requests from data subjects exercising their rights under applicable data protection laws.

6. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication
  • Regular backups and disaster recovery procedures
  • Employee training on data protection

7. Data Transfers

Personal data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place for such transfers.

8. Audit Rights

Upon reasonable notice, the Customer may audit Snaply's compliance with this DPA, subject to confidentiality obligations.

9. Data Return and Deletion

Upon termination of services, Snaply will, at the Customer's choice, return or delete all personal data, unless legally required to retain it.