When your business uses hlix, you decide what personal data goes into your workspace and why. You are the controller of that data, and hlix processes it on your behalf. Our Data Processing Addendum (DPA) sets out those terms, in line with GDPR Article 28 and the UK GDPR.
To get a signed DPA, email support@hlix.ai with your company's legal name and address.
What the DPA says
- Instructions: we process your data only to provide hlix, as you instruct through your use of it and your agreement with us.
- Confidentiality: people who can access your data are bound to keep it confidential.
- Security: we keep the measures described on our Security page in place.
- Subprocessors: you authorise the categories on our Subprocessors page. We tell you before we add or replace one, so you can object.
- Transfers: we store your data in the EU. Where a subprocessor handles it outside the EU or UK, we protect it with the Standard Contractual Clauses.
- Your people's rights: we help you answer requests from the people whose data is in your workspace.
- Breaches: we tell you without undue delay, and within 72 hours, after we become aware of a personal data breach that affects your data.
- Deletion: when your agreement ends, we delete your data, or return it first if you ask, as our Privacy Policy describes.
- Audits: we give you the information you need to show compliance. Once a year, with 30 days' notice, we answer a written security questionnaire and share our available security reports.
AI processing
hlix sends workspace content to AI models to do the work you ask for. hlix does not use your content to train AI models.