Sub-processors and DPA

Inspera has Data Processing Agreements, compliant with GDPR as well as other national data protection and privacy regulations, for Inspera Assessment service.

What is a Data Processing Agreement?

A Data Processing Agreement (DPA) between the Data Controller (customer organisation) and the Data Processor (Inspera) regulates how personal data is defined and processed, also covering all data processing by Third Parties.

All hosting, storage and processing of personal data on Inspera Assessment adheres to the General Data Protection Regulation (EU 2016/679) ("GDPR").

Data Processing Agreements also regulate sharing of personal data. With the exception of sub-processors outlined in the Data Processing Agreement, we don't disclose personal data to third parties.

Inspera Assessment sub-processors

Sub-processor	Purpose	Personal data
Inspera AB (559139-5594) Kungsbro Strand 15b 112 24 Stockholm, Sweden Inter-company DPA available upon request.	Subsidiary of Inspera AS acting on its behalf whenever necessary. Applies to all personal data processed by Inspera.	Any personal data available to Inspera as listed in Section 3.2 of the Privacy Notice based on individual access control.
Inspera ApS (400 27 866) Viborgvej 159A Hasle 8210 Aarhus V, Denmark Inter-company DPA available upon request.	Subsidiary of Inspera AS acting on its behalf whenever necessary. Applies to all personal data processed by Inspera.	Any personal data available to Inspera as listed in Section 3.2 of the Privacy Notice based on individual access control.
Inspera UK Ltd. (13019428) Inspera UK Ltd, R+, Blagrave Street, Reading, RG1 1AZ, England Inter-company DPA available upon request.	Subsidiary of Inspera AS acting on its behalf whenever necessary. Applies to all personal data processed by Inspera.	Any personal data available to Inspera as listed in Section 3.2 of the Privacy Notice based on individual access control.
Inspera Australia PTY Ltd. (643 999 295) Level 1 300 Queens Street Brisbane QLD 4000, Australia Inter-company DPA available upon request.	Subsidiary of Inspera AS acting on its behalf whenever necessary. Applies to all personal data processed by Inspera.	Any personal data available to Inspera as listed in Section 3.2 of the Privacy Notice based on individual access control.
Kikora AS (918 781 293) Cort Adelers gate 30 0254 Oslo Inter-company DPA available upon request.	Subsidiary of Inspera AS acting on its behalf whenever necessary. Applies to all personal data processed by Inspera.	Any personal data available to Inspera as listed in Section 3.2 of the Privacy Notice based on individual access control.
Amazon Web Services (566018) Luxembourg View/Download DPA.	Hosting of infrastructure (IaaS) and services (SaaS) that Inspera Assessment is based on and provided through. Applies to all customers and end-users of Inspera Assessment product portfolio.	Any personal data available to Inspera as listed in Section 3.2 of the Privacy Notice based on individual access control.
TrackJS LLC (46-3649439) 215 Pine Street West, Stillwater MN 55082, USA View/Download DPA.	Identify and report client side application failures for troubleshooting and end-user support. Applies to customers of Inspera Assessment that have the TrackJS debug option enabled.	Only the pseudonymised IP address of the candidate’s client device.

Sub-processor

Purpose

Personal data

Inspera AB (559139-5594)

Kungsbro Strand 15b
112 24 Stockholm, Sweden

Inter-company DPA available upon request.

Subsidiary of Inspera AS acting on its behalf whenever necessary.

Applies to all personal data processed by Inspera.