Data Processing Addendum (Template)

Last updated: 8 July 2026

This template DPA applies where Hridtech Private Limited ("Skilyo") processes personal data on behalf of an employer customer ("Controller"). A countersigned copy is available on request to sanket@hridtech.com.

1. Roles

For candidate data an employer uploads or accesses, the employer is the Controller and Skilyo is the Processor. For Skilyo’s own accounts and platform data, Skilyo is the Controller.

2. Scope & purpose

Skilyo processes personal data only to provide the hiring platform and on the Controller’s documented instructions.

3. Security

Skilyo maintains the technical and organisational measures described on our Security page, appropriate to the risk.

4. Sub-processors

The Controller authorises the sub-processors listed on our Sub-processors page. We give notice of material changes.

5. Data-subject rights & assistance

Skilyo assists the Controller in responding to data-principal/subject requests and regulator enquiries.

6. Breach notification

Skilyo notifies the Controller without undue delay after becoming aware of a personal-data breach.

7. Deletion

On termination, Skilyo deletes or returns personal data, subject to legal retention requirements.

8. Law

This DPA is governed by the laws of India and supports obligations under the DPDP Act 2023 and UK/EU GDPR.