This Data Processing Addendum (“DPA”) forms part of the Assessment.com Master Platform Agreement, Software License Agreement, and Enterprise Licensing Terms (collectively, the “Agreement”).

This DPA applies when Assessment.com processes personal data on behalf of a customer or organization using the Assessment.com platform (the “Customer”).

1. Definitions

For purposes of this DPA:

Personal Data
means any information relating to an identified or identifiable individual that is processed through the Assessment.com platform.

Processing
means any operation performed on personal data including collection, storage, analysis, transmission, or deletion.

Controller
means the entity that determines the purposes and means of processing personal data.

Processor
means an entity that processes personal data on behalf of a controller.

For purposes of this DPA:

• The Customer is the Data Controller
  • Assessment.com is the Data Processor
  
  

2. Scope of Processing

Assessment.com processes personal data solely to provide the services described in the Agreement.

Processing may include:

• hosting assessments and surveys
  • collecting participant responses
  • generating reports and analytics
  • storing user account information
  • supporting platform functionality

Assessment.com will not process personal data for purposes other than those described in the Agreement unless required by law.

3. Categories of Data

Personal data processed through the platform may include:

• name
  • email address
  • contact information
  • demographic information
  • assessment responses
  • behavioral or preference information
  • educational or employment-related information

The exact categories of data depend on the assessments administered by the Customer.

4. Categories of Data Subjects

Data subjects may include:

• employees
  • job applicants
  • students
  • coaching clients
  • survey participants
  • platform users
  
  

5. Customer Responsibilities

The Customer is responsible for:

• determining the lawful basis for processing personal data
  • providing required notices to data subjects
  • obtaining consent where required
  • ensuring compliance with applicable privacy laws

The Customer represents and warrants that it has the legal right to collect and process personal data through the platform.

6. Processor Obligations

Assessment.com agrees to:

• process personal data only according to the Customer’s instructions
  • maintain appropriate security safeguards
  • limit access to personal data to authorized personnel
  • ensure personnel handling personal data are subject to confidentiality obligations

Assessment.com will not sell or disclose personal data except as permitted by the Agreement or required by law.

7. Subprocessors

Assessment.com may use third-party service providers (“Subprocessors”) to support the platform, including:

• cloud hosting providers
  • payment processors
  • analytics providers
  • artificial intelligence services
  • infrastructure providers

Assessment.com will take reasonable steps to ensure sub processors maintain appropriate data protection standards.

8. Security Measures

Assessment.com implements commercially reasonable security measures including:

• encryption of data in transit
  • secure authentication systems
  • restricted access controls
  • monitoring for unauthorized access

However, no system can guarantee absolute security.

9. Data Breach Notification

In the event of a confirmed security incident involving personal data processed on behalf of the Customer, Assessment.com will notify the Customer without undue delay after becoming aware of the incident.

Notification may include:

• the nature of the incident
  • categories of affected data
  • steps taken to mitigate the issue

Customers remain responsible for determining whether regulatory notifications are required.

10. Data Retention and Deletion

Personal data will be retained only as long as necessary to provide the services described in the Agreement or as required by law.

Upon termination of services, personal data may be:

• deleted
  • returned to the Customer
  • retained in anonymized or aggregated form

Anonymized data may be retained for research, analytics, or platform improvement.

11. International Data Transfers

Assessment.com may process personal data in the United States or other jurisdictions where its service providers operate.

Customers acknowledge that data transfers may occur across international borders.

Assessment.com will take reasonable steps to ensure appropriate safeguards are in place for international data transfers.

12. Data Subject Requests

If Assessment.com receives a request from a data subject relating to personal data processed on behalf of a Customer, Assessment.com will direct the request to the Customer unless legally prohibited.

Customers are responsible for responding to requests involving:

• access
  • correction
  • deletion
  • data portability
  
  

13. Audits

Customers may request reasonable information regarding Assessment.com’s security practices.

Formal audits may be conducted only:

• with reasonable advance notice
  • during normal business hours
  • in a manner that does not disrupt platform operations
  
  

14. Liability

The liability provisions of the Master Platform Agreement apply to this DPA.

Assessment.com’s liability related to data processing shall not exceed the limitations set forth in the Agreement.

15. Conflict with Other Agreements

If there is a conflict between this DPA and the Master Platform Agreement, the terms of this DPA shall control with respect to data processing obligations.

16. Governing Law

This DPA shall be governed by the laws specified in the Master Platform Agreement.

17. Contact Information

Assessment.com
International Assessment Network LLC

6586 W Atlantic Avenue
Suite 1229
Delray Beach, FL 33446

Email: info@assessment.com

Acceptance

By using the Assessment.com platform, the Customer acknowledges that it has read and agrees to this Data Processing Addendum.