Data Processing

1. Definitions

• "Controller" refers to the Client business that determines the purposes and means of processing employee personal data.
• "Processor" refers to Alpha Supreme Services LLC, which processes personal data on behalf of the Controller.
• "Personal Data" means any information relating to an identified or identifiable natural person submitted through the Platform.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion.

2. Scope and Purpose

This Data Processing Agreement ("DPA") applies when Alpha Supreme Services LLCprocesses Personal Data on behalf of a Client (Controller). The purpose of processing is limited to providing the Platform services described in the Terms of Service, including HR workflow management, employee notifications, and document storage.

3. Categories of Data Processed

• Employee Identifiers: Names, email addresses, phone numbers, dates of birth, employee IDs
• Employment Information: Positions, wages, start dates, employment status, company assignments
• Performance Data: Performance ratings, evaluator comments, strengths, and improvement areas
• Disciplinary Records: Warning types, reasons, details, dates, and issuer information
• Termination Records: Termination types, reasons, and last day of employment
• Documents: Uploaded files related to onboarding, compliance, and HR processes

4. Obligations of the Processor

Alpha Supreme Services LLC agrees to:

• Process Personal Data only on documented instructions from the Controller, unless required by law
• Ensure that persons authorized to process Personal Data are bound by confidentiality obligations
• Implement appropriate technical and organizational security measures, including encryption, access controls, and row-level security
• Not engage sub-processors without prior written authorization from the Controller
• Assist the Controller in responding to data subject rights requests
• Delete or return all Personal Data upon termination of the business relationship, unless retention is required by law
• Make available to the Controller information necessary to demonstrate compliance with this DPA

5. Obligations of the Controller

The Controller agrees to:

• Ensure that it has obtained all necessary consents and authorizations before submitting employee Personal Data to the Platform
• Provide clear and lawful instructions for the processing of Personal Data
• Comply with all applicable data protection laws in connection with its use of the Platform
• Notify employees whose data is being processed through the Platform, including the nature and purpose of processing

6. Sub-Processors

Alpha Supreme Services LLC currently uses the following sub-processors:

• Cloud Infrastructure Provider: For hosting, database, authentication, and file storage
• Resend: For transactional email delivery (review notifications and warning acknowledgments)
• Homebase: For employee data retrieval (when integrated by the Client)

The Controller will be notified of any changes to sub-processors and may object within 30 days.

7. Data Breach Notification

Alpha Supreme Services LLC will notify the Controller without undue delay (and in any event within 72 hours) upon becoming aware of a Personal Data breach. The notification will include the nature of the breach, categories and approximate number of affected individuals, likely consequences, and measures taken to address and mitigate the breach.

8. Data Transfers

Personal Data is stored and processed within the United States. If cross-border data transfers become necessary, Alpha Supreme Services LLC will implement appropriate safeguards in compliance with applicable law.

9. Term and Termination

This DPA is effective for the duration of the business relationship between the Controller and Alpha Supreme Services LLC. Upon termination, Alpha Supreme Services LLC will delete or return all Personal Data within 90 days, unless legal obligations require retention.

10. Contact

For DPA-related inquiries, contact us at admin@ass.services.