Legal

Everything you would have to ask for, already published.

The contract, the Data Processing Addendum, the privacy policy and the list of everyone we let near your data. No NDA, no form, no sales call.

The short version

  • You accept the Terms by ticking the box at sign-up. Nothing needs signing and returning, including the Data Processing Addendum.
  • The DPA applies on every plan, including the free one.
  • We give at least 30 days notice before a new sub-processor touches your data, and you can object.
  • Your people data is never used to train an AI model. That is contractual, at clause 35.1.

Need a countersigned copy, a penetration test summary or an answer to a security questionnaire? Email legal@hrgoat.ai. The security page covers how we look after it all.