RevInfraWorks legal & privacy

Data Processing Addendum

Effective September 24, 2026 · Applies to RevInfra Clock services operated by RevInfraWorks.

Roles and instructions

For workforce and attendance data controlled by a subscribing organization, the customer generally acts as controller or business and RevInfraWorks generally acts as processor or service provider. RevInfraWorks processes that data to provide the service and on documented customer instructions, except where applicable law requires otherwise.

Confidentiality and security

RevInfraWorks limits service-data access to authorized personnel and service providers with a business need, uses appropriate confidentiality obligations, and maintains technical and organizational safeguards appropriate to the service and the nature of the data.

Subprocessors and assistance

RevInfraWorks may use subprocessors to provide hosting, storage, communications, billing, security, support, and other configured service functions. RevInfraWorks remains responsible for appropriate contractual protections and provides reasonable assistance with data-subject requests, security incidents, and compliance information where required.

Return, deletion, and transfers

At the end of service, customer data may be returned or deleted according to product capabilities, contractual obligations, the Data Retention & Deletion Policy, and applicable law. Cross-border processing uses appropriate safeguards where legally required.