Data Processing Addendum

Introduction

This Data Processing Addendum (DPA) describes how Ziora processes personal data on behalf of our customers. It forms part of our agreement with you.

Scope of the DPA

The DPA applies whenever Ziora processes personal data that you provide, or that is generated through your use of the platform.

Roles & Responsibilities

Responsibilities are clearly divided between you and Ziora:

Categories of Personal Data

• Identity & contact — names and work emails.
• Employment data — roles, records and assignments.
• Learning & performance data — progress, skills and outcomes.
• Technical data — logs and device information.

Purpose of Processing

We process data only to provide, secure and support the platform — never for our own unrelated purposes.

Data Security Measures

We apply encryption, access control, monitoring and the safeguards described on our Security page.

Confidentiality

Our personnel are bound by confidentiality obligations and access data only as needed to deliver the service.

International Data Transfers

Where data crosses borders, we use recognized transfer mechanisms and safeguards to keep it protected.

Subprocessors

We use vetted subprocessors under strict contractual terms and maintain a current list available on request. We notify customers of material changes.

Customer Rights

You can access, correct, export or delete data, and we assist with data-subject requests as required.

Data Retention

We retain data for the term of your agreement and delete or return it afterward, as instructed.

Contact Information

For DPA questions or to request our subprocessor list, email sales@ziora.co.