Diriqo GDPR and DPA

GDPR and data processing framework

This page is prepared as the future English GDPR and DPA framework for B2B customers. It summarizes the main controller and processor roles, data categories, security measures, subprocessors, incident handling, export and deletion principles.

Prepared for B2B and future enterprise customersController and processor roles by contextFramework for a future DPA workflow

Last updated: May 17, 2026. These documents may be updated over time, especially when the service, legal requirements or infrastructure change. The current version is always available on this page.

1. Purpose

This document describes the high-level GDPR and data processing framework used by Diriqo when providing its SaaS service to business customers. A separate DPA or enterprise addendum may be agreed with individual customers.

2. Roles of the parties

For customer content entered into the service, the customer is usually the controller and Diriqo is usually the processor. For account administration, billing, support, website operation and security, Diriqo may act as an independent controller.

3. Data categories

Depending on customer use, Diriqo may process worker, customer, job, shift, attendance, photo, offer, invoice, communication, audit log and technical metadata.

4. Security

Diriqo applies reasonable technical and organisational measures, including access controls, encrypted communication, logging, monitoring, backups and incident response processes appropriate for a modern B2B SaaS service.

5. Contact

For GDPR or DPA questions, contact support@diriqo.com.