Data Processing Agreement
Draft · How Fieldtec handles the personal information in your company's records.
Roles
Your company decides what personal information goes into Fieldtec and why — including information about your workers, and sensitive information such as injuries and medical details. Fieldtec processes it only on your behalf and on your instructions, to provide the service. This agreement forms part of the Terms of Service.
What we commit to
- Use your records only to provide, secure and support the service — never for our own purposes, never sold.
- Keep each company's records separate, so no other customer can see them.
- Limit Fieldtec staff access to support sessions linked to a request, recorded in your activity history.
- Store your records in Canada, and use only the subprocessors listed on the Subprocessors tab.
- Give at least 30 days' notice before adding a subprocessor that handles your records.
- Tell you within 72 hours of confirming a breach affecting your records, and help you meet your own notification obligations.
- Help you respond when a worker asks to see or correct their information.
- At the end of the service, keep your records read-only for 90 days for export, then delete them.
What you commit to
You have a lawful basis for the information you enter and have given your workers the notices the law requires. You manage your own users and their roles, and remove access for people who leave.
Security
The measures we maintain are described on the Security tab, and are kept at least at that level for as long as we hold your records.