Copperlane Payroll - Data Processing Agreement (signed)
Documentexecuted Copperlane Payroll: documents · dpa · executed · 2025-05-16
Executed Data Processing Agreement, effective 16 May 2025, under which B-Brain Limited is Processor and Copperlane Payroll is Controller. It states no availability, P1 response time or price.
What it says
What this says
Current to 11 Oct 26Executed Data Processing Agreement, effective 16 May 2025, under which B-Brain Limited is Processor and Copperlane Payroll is Controller. It states no availability, P1 response time or price.
What it is: a short data processing agreement covering how B-Brain processes Copperlane Payroll's personal data. It is signed by an authorised representative on each side on 16 May 2025, and the signatories are not named.
Commits: B-Brain to process only on documented written instructions, keep staff under confidentiality, and not engage a sub-processor without written authorisation from the Controller. It must also delete or return personal data at the end of the services and allow audits and inspections.
Unusual: the text says it sits under the Master Service Agreement dated 1 Jun 2025, which is after its own effective date of 16 May 2025. The agreement does not say which came first in practice.
Not settled: no service levels, price, term, renewal or connector dates appear. Those sit in the order form and MSA, which this document does not contain.
As found in this document
Current to 9 Oct 26- Date signed16 May 2025Source: object_read:doc_022_005
- Date start16 May 2025Source: object_read:doc_022_005
- Processing instructionsThe Processor shall process Personal Data only on documented written instructions from the ControllerThe Processor shall process Personal Data only on documented written instructions from the Controller · Source: object_read:doc_022_005
- Sub-processorsThe Processor shall not engage any sub-processor without prior specific or general written authorisation from the ControllerThe Processor shall not engage any sub-processor without prior specific or general written authorisation from the Controller · Source: object_read:doc_022_005
- Deletion or returnAt the end of the provision of services, the Processor shall delete or return all Personal Data, and delete existing copies unless applicable law requires storageAt the end of the provision of services, the Processor shall delete or return all Personal Data, and delete existing copies unless applicable law requires storage · Source: object_read:doc_022_005
- Auditsallow for and contribute to audits and inspections by the Controller or the Controller's auditorsallow for and contribute to audits and inspections by the Controller or the Controller's auditors · Source: object_read:doc_022_005
The document
Body
Unusual terms
Current to 9 Oct 26- Effective 16 May 2025, before the MSA dated 1 Jun 2025 it refers to