Register

Հայերեն

Data Processing Agreement

Last updated: 14 November 2026

This agreement is part of the Terms of Service. It covers the personal data your company puts into orgcanvas. Your company is the controller of this data; Soft Planet LLC is the processor.

What is processed

Whose data: your company's employees, former employees, candidates for positions, and the users of your account.

What data, depending on what your company enters: names, positions, departments, managers, employment details (type, location, working time, contract end), hire and leaving dates and reasons, career history, pay (salary, bonus, grade), contact details, performance goals and results, competency test results, development and training plans, succession and 9-box placements, engagement survey answers (anonymous) and notes.

Why: only to provide orgcanvas to your company, for as long as your company uses it.

What Soft Planet promises

  1. To process the data only on your company's documented instructions: the settings and actions in orgcanvas and the Terms are those instructions.
  2. That everyone at Soft Planet who can reach the data is bound to keep it confidential.
  3. To keep the data secure: each company's data separated in the database, access by role (pay only for roles allowed to see it), encryption in transit and at rest, a log of every change.
  4. Never to send names, contact details, ID numbers or salaries to the AI model; only anonymised context.
  5. To use only the sub-processors listed below, and to tell your company by e-mail at least 30 days before adding or replacing one, so that your company can object.
  6. To help your company answer requests from employees who want to see, correct or delete their data.
  7. To tell your company without undue delay, and at the latest within 72 hours of becoming aware of it, if its data is breached, with what we know and what we are doing.
  8. To delete your company's data within 90 days after the account ends, or earlier if your company asks, except records the law requires us to keep.
  9. To give your company the information it reasonably needs to check that we keep these promises.

Sub-processors

  • Supabase — database and sign-in, European Union (Frankfurt, Germany);
  • Vercel — hosting of the application;
  • Resend — e-mails sent by orgcanvas (invitations, links, notices);
  • OpenAI — AI drafts, anonymised context only, no names, contacts, IDs or salaries.

Some sub-processors are based in the United States. Soft Planet uses them under their data protection terms, which bind them to process data only to provide their service.

What your company promises

To have a legal ground for processing its employees' data in orgcanvas, to inform its employees as the law requires, and to put into orgcanvas only the data it needs.

Liability and duration

Liability under this agreement follows the Terms of Service. This agreement lasts as long as Soft Planet processes your company's data.

Contact

Soft Planet LLC, info@orgcanvas.am. If your company needs a signed copy of this agreement, write to us.

Other documents