HR Forte Data Processing Addendum: Executive Summary

HR Forte is a native SaaS HR and payroll platform that enables customers to manage employee, payroll, leave, claims, attendance, document, reporting, and related workforce data through a secure cloud-based system.

 

This Data Processing Addendum, or DPA, explains how HR Forte processes Customer Personal Data when customers use the HR Forte platform.

 

The DPA forms part of HR Forte’s contractual terms with customers and should be read together with the applicable HR Forte Terms and Conditions, subscription terms, order form, master subscription agreement, or other agreement governing the customer’s use of the platform. It is designed to support clear data protection responsibilities between HR Forte and its customers.

 

Under the DPA, customers remain responsible for managing and controlling the data they submit to the platform.

Customers decide what information is entered, which users are given access, which modules and workflows are used, and how outputs generated through the platform are reviewed and applied.

 

HR Forte does not provide HR outsourcing, payroll outsourcing, corporate services, tax advisory services, employment advisory services, or managed payroll services under the DPA.

HR Forte’s role is to operate, secure, maintain, and support the SaaS platform.

 

For Customer Personal Data processed through the platform, HR Forte generally acts as a processor or sub-processor, depending on the customer’s own role. Customers may be employers using HR Forte for their own workforce, or consultants, payroll bureaus, accountants, HR service providers, corporate service providers, resellers, implementation partners, or other intermediaries using HR Forte for their own end clients.

Each customer is responsible for ensuring that it has the necessary authority, notices, consents, contractual rights, and lawful basis to submit and process Customer Personal Data through the platform.

 

The DPA describes HR Forte’s commitments around processing instructions, confidentiality, security measures, sub-processors, international transfers, data subject requests, personal data breach notification, retention, deletion, return of data, audit support, and cooperation with customer compliance obligations. It also explains how HR Forte may use material sub-processors, such as cloud infrastructure providers, to support platform hosting, database hosting, storage, backup, security, availability, and related operations.

 

This DPA is intended to provide customers, enterprise procurement teams, and information security reviewers with a clear overview of HR Forte’s data-processing responsibilities as a SaaS platform provider. It also supports HR Forte’s broader privacy, security, and governance framework, including information security controls relevant to ISO 27001 readiness.

 

You may download the full HR Forte Data Processing Addendum below for detailed terms, schedules, security measures, sub-processor information, and international transfer provisions.