Data Processing Addendum
This summary describes the data processing principles Digiverifier expects to apply when handling personal data for background verification or background check workflows under a customer agreement. Signed customer terms, order forms or data processing agreements control where they provide more specific obligations.
Processing Roles
Processing roles depend on the contracted service, region and screening purpose. Customer agreements or signed data processing terms define controller, processor, service provider, consumer reporting agency or equivalent roles where those concepts apply.
Processing Instructions
Digiverifier processes personal data to provide the requested verification workflow, support candidate communications, operate quality review, deliver reports, handle disputes or corrections, maintain audit trails and comply with applicable legal or contractual requirements.
Security Measures
Digiverifier applies administrative, technical and operational safeguards designed to protect verification data against unauthorized access, loss, misuse and inappropriate disclosure. Safeguards may include access controls, encryption, activity records, least-privilege permissions, operational review and vendor due diligence.
Confidentiality and Access
Personnel and service providers with access to personal data are expected to handle it under confidentiality obligations and role-appropriate access controls. Customer administrators are responsible for assigning access to their own authorized users.
Subprocessors
Digiverifier may use vetted service providers to host systems, support communications, perform verification workflows, operate business infrastructure, monitor security, collect form submissions or support customer operations, subject to contractual safeguards.
Candidate Rights and Disputes
Where a candidate has rights to access, correction, dispute, reinvestigation or deletion, Digiverifier supports the workflow according to the applicable service, region, customer agreement and legal requirement. Customers may need to perform their own employer-side notices or decisions.
Incident Handling
If Digiverifier becomes aware of a security incident affecting personal data under a customer agreement, it will assess the issue, take appropriate containment steps and provide notices required by the applicable agreement or law.
Deletion and Return
Data return, deletion and retention are handled according to the applicable customer agreement, legal requirements, dispute obligations and operational retention requirements for screening records. Some records may need to be retained for audit, legal or compliance purposes.
Audit and Documentation
Digiverifier maintains operational documentation intended to support security review, vendor assessment and audit-readiness. The specific reports, attestations or questionnaires available to a customer depend on the contracted service and review process.
Last updated: June 29, 2026. This page is a website summary and does not replace signed customer terms.