A DPA, ready to sign.
LAST UPDATED OCTOBER 13, 2026Our DPA is built for the EU and UK GDPR and the CCPA. It is part of your agreement with us from the moment you start using Worklyne. If your procurement team needs a countersigned copy, request one below.
01 · Scope
Covers personal data in your workspace, such as member names, emails, profile details and anything your team writes in tasks, comments and files. We process it for as long as you use Worklyne.
02 · Your instructions
We only process data to provide, secure and support the service, and as you direct through the product or in writing. We never sell it or use it to train AI models.
03 · Confidentiality and security
Everyone at Worklyne with access to customer data is bound by confidentiality. Our technical and organizational measures are described on the Security page and attached to the DPA.
04 · Subprocessors
These categories of providers help us run Worklyne. Enterprise customers get the named providers in their signed DPA, with 30 days’ notice before we add one so they can object. On other plans, the list is available on request.
05 · Breach notification
If a breach affects your data, we notify your workspace admins without undue delay, with the details you need to meet your own reporting duties. Enterprise agreements commit to notice within 48 hours of confirming it.
06 · International transfers
Transfers outside the EU or UK rely on the EU Standard Contractual Clauses and the UK Addendum, which are built into the DPA. EU-hosted Enterprise workspaces stay in the EU.
07 · Deletion and return
When your contract ends, you can export everything. We delete your workspace data within 30 days, and from backups within 90 days.
08 · Audits
We answer reasonable security questionnaires and will share our SOC 2 report once it’s complete. On-site audits can be arranged for Enterprise plans.