Data Processing Agreement

Helia HR acts as a data processor under GDPR Art. 28 for the employee + organisational data you store in our platform. Download the canonical DPA + SCC overlays below. The agreement is electronically signable from your in-app security dashboard once you create a tenant.

Regulatory anchors

• GDPR Art. 28 (processor obligations) + Art. 32 (security)
• EU Standard Contractual Clauses 2021 (Commission Decision 2021/914) — Module 2 + Module 3
• Schrems II (CJEU C-311/18) + EU-US Data Privacy Framework
• UK International Data Transfer Agreement (IDTA) + Addendum
• UK GDPR + Data Protection Act 2018
• EDPB Recommendations 01/2020 on supplementary measures
• ISO/IEC 27018, ISO/IEC 27701, eIDAS Regulation 910/2014

Available templates

No active canonical DPA templates published at this time. If you need a DPA urgently, contact privacy@heliahr.com.

After you sign

Once you have signed and returned the DPA, the Helia legal team countersigns within 14 business days. Your tenant admin can then view the fully-executed PDF at /security/dpa.