Data Processing Agreement

This agreement sets out how black sofa processes personal data on behalf of our clients — ensuring security, compliance and transparency.

Effective date: 20 March 2026

1. Scope

This DPA applies where black sofa processes personal data as a data processor.

2. Processing Activities

We process payroll-related employee and tax data solely for service delivery.

3. Security Measures

We implement technical and organisational safeguards to protect data.

4. Sub-processors

Clients are informed of sub-processors and equivalent safeguards are enforced.

5. Data Subject Rights

We assist clients in fulfilling GDPR data subject requests.