Data Processing Addendum

1. Overview

This page describes how IO Codash Technologies Private Limited handles data processing obligations when customers use Cointervue to process personal data about candidates and users on the customer's behalf.

For pilot and standard customers, our Privacy Policy and Terms of Use describe baseline data roles. Enterprise customers may request a signed Data Processing Addendum (DPA) with additional processor commitments.

2. Roles

• Customer (employer) — typically the data controller / data fiduciary for candidate personal data; decides invitation, access to results, and hiring decisions.
• IO Codash Technologies Private Limited — data processor, processing candidate and user data solely on documented instructions from the customer to deliver the Service.
• Candidate — data subject / individual whose interview data is processed; exercises many rights primarily through the employer, with Codash assisting as processor (see Privacy Policy).

3. What a signed DPA covers

Our standard enterprise DPA typically includes:

• Subject matter, duration, and nature of processing
• Types of personal data and categories of data subjects
• Customer instructions and processor obligations
• Confidentiality and security measures
• Subprocessor requirements and notification
• Assistance with data subject requests and DPIAs where applicable
• Breach notification timelines
• Deletion or return of data upon termination
• Cross-border transfer mechanisms (e.g. Standard Contractual Clauses for GDPR)

4. How to request a DPA

Email contact@codashs.com with your company name, intended use case, and jurisdictions where you hire. Our team will provide the current DPA template or discuss enterprise terms.

5. Subprocessors

We use infrastructure, communication, and AI service providers to operate the platform. Subprocessor details are available to enterprise customers under NDA or as part of the DPA schedule.

6. Contact

IO Codash Technologies Private Limited · contact@codashs.com