Legal and compliance
Every document, published in full
The DPA and its annexes, the sub-processor list, the platform terms and everything incorporated into them. Each at its own address, each dated, each clause numbered. Read them today and forward them to whoever signs off; nothing here waits on a sales call.
The register
Every document we publish, on one page
What each one covers, and when it last changed. A review does not have to open all of them to find the one it needs, and every address here is safe to paste into a questionnaire.
26 of 26 documents
Asked for firstData Processing AddendumSub-processorsSecurity PolicyPlatform Terms of ServicePrivacy Policy
Overview
3- Legal OverviewHow the register is organised, who each document is written for, and which agreement wins when two of them disagree.How the register is organized · Which document wins · Where to start, by who you are · What we will not claim · +2 moreNot dated
- Legal Change LogWhat changed in these documents and when, how we notify you of a change, and the list of commitments we have made and not yet completed.Version 3.1 — September 8, 2026 · Version 3.0 — September 8, 2026 · Two archived editions were withdrawn, not superseded · Commitments we have made and not yet completed · +2 moreEffective · September 8, 2026
- Accessibility StatementThe accessibility standard we build to, what we test with, the limitations we know about, and where to report something that fails.The standard we build to · What we do · Known limitations · Assistive technology we test with · +3 moreEffective · September 8, 2026
Privacy & data protection
9- Privacy PolicyWhat personal data we handle as a company, on what legal basis, who it reaches, how long it is kept, and the rights you can exercise over it.Who this policy is for · The personal data we handle · Where we get it · Why we use it, and our legal basis · +12 moreEffective · September 8, 2026
- US State Privacy NoticeThe notice at collection for California and the other US state privacy laws: the statutory categories, why we neither sell nor share, and how to make a request.Categories of personal information we collect · Sensitive personal information · Why we collect it · We do not sell personal information, and we share one narrow category for advertising · +8 moreEffective · September 8, 2026
- Cookie PolicyEvery cookie we set, what each is for and how long it lasts — and why there is no analytics cookie and no consent banner.What these technologies are · Cookies we set ourselves · Analytics, and what it takes to switch it on · Advertising and conversion measurement · +5 moreEffective · September 8, 2026
- Data Processing AddendumThe processor agreement, pre-executed: your instructions, sub-processing, security, transfers and deletion, with the Standard Contractual Clauses and Annexes I to III completed.Definitions · Roles of the parties · Our processing instructions · Details of the processing · +15 moreEffective · September 8, 2026
- Sub-processorsEvery sub-processor we engage, what each is engaged to do, where it processes data, and how a change to the list reaches you.Infrastructure and hosting · Payments and billing · AI processing · Communications and support · +5 moreEffective · September 8, 2026
- Worker Privacy NoticeWritten for the person being measured: what the software can record, what it cannot do at all, who can see it, and where to take a question.What the software can record · What the software cannot do · Who can see it · Scores, summaries and AI · +5 moreEffective · September 8, 2026
- Law Enforcement RequestsWhat we require before we disclose anything to an authority, what we challenge, when we tell you, and our current national-security position.Go to the customer, not to us · What we require before we disclose anything · We challenge what should be challenged · We tell you · +7 moreEffective · September 8, 2026
- Privacy FAQShort answers to what we are asked most: whether data is sold, whether models are trained on it, whether keystrokes are read, and who the controller is.Do you sell our data? · Do you train AI models on our data? · Can you read what our employees type? · Do you record video, audio or the camera? · +12 moreEffective · September 8, 2026
- DPA FAQFor the person running the vendor review: whether anything needs signing, which SCC modules apply, how sub-processor changes arrive, and what you can audit.Do we need to sign the DPA? · Can we use our own DPA template instead? · Which Standard Contractual Clauses do you use? · Do you rely on the Data Privacy Framework? · +8 moreEffective · September 8, 2026
Product terms & conditions
10- Platform Terms of ServiceThe master agreement: the service, your deployment obligations, fees and billing, IP, confidentiality, indemnities, liability, arbitration and termination.The agreement between us · Definitions · The Services and your right to use them · Restrictions · +35 moreEffective · September 8, 2026
- Website Terms of UseThe public site rather than the platform: what you may do with our content, why our jurisdiction guides are not legal advice, and the limits on the verifier.Permitted use of the Site · What you must not do on the Site · Our content is not legal advice · Free tools and calculators · +10 moreEffective · September 8, 2026
- Acceptable Use PolicyConduct that is not permitted, starting with monitoring an employer has no lawful basis for, and how we enforce it.Monitoring people: the rules that matter most · Use of the output · Prohibited content and conduct · Platform integrity and security · +5 moreEffective · September 8, 2026
- AI Features TermsThe AI features: the binding commitment not to train on your data, what is sent and when, and the rule that output is never the sole basis for a decision about a person.We do not train on your data · AI output is a suggestion, not a determination · What is sent, and when · Screenshots and captured images · +6 moreEffective · September 8, 2026
- API & Developer TermsBuilding on the public API: credentials, rate limits, what counts as a breaking change, the deprecation window, and embedded widgets.Your right to use the API · Credentials and their security · Rate limits and fair use · What you must not do with the API · +6 moreEffective · September 8, 2026
- Beta & Early Access TermsWhat the word beta actually buys you: no service level, no support, no warranty, no guarantee it ships, and a right to stop using it.What a Beta Feature is, and what it is not · No service level, no support, no warranty · They may change, break or disappear · Do not rely on a Beta Feature · +4 moreEffective · September 8, 2026
- Order Form TermsWhat attaches to a signed order form: seats and true-up, invoicing, renewal, negotiated commitments, and why your purchase order adds nothing.What an Order Form does · Your purchase order does not add terms · Seats and true-up · Fees, invoicing and payment · +7 moreEffective · September 8, 2026
- Service Level AgreementThe availability commitment, how it is measured, the service credits when it is missed, what is excluded, and the chronic-failure exit.The commitment · How availability is measured · Service credits · Claiming a credit · +7 moreEffective · September 8, 2026
- Support PolicyHow to reach support, the severity levels, first-response targets by plan, what support does not cover, and the deprecation notice period.How to reach support · Support hours · Severity levels · Response targets · +6 moreEffective · September 8, 2026
- Affiliate Programme TermsEligibility, attribution, commission, the holding period and payment, for both the partner track and the in-product referral programme.Eligibility · Attribution · Commission · Holding period, refunds and chargebacks · +6 moreEffective · September 8, 2026
Security & brand
4- Security PolicyHow the platform is protected, what we ask of you, what we do when something goes wrong — and a published list of what we do not yet have.The principles we work to · How the platform is protected · What we do not yet have · Your side of the boundary · +4 moreEffective · September 8, 2026
- Vulnerability DisclosureHow to report a security issue, what is in and out of scope, what we commit to doing, and the safe harbour we offer researchers who follow it.Safe harbour · What is in scope · What is out of scope · What we ask of you · +5 moreEffective · September 8, 2026
- Copyright & DMCA PolicyHow to send a copyright notice or a counter-notice, what we do with one, and how we handle repeat infringement.Sending a copyright notice · Before you send one · What we do with a notice · Counter-notice · +3 moreEffective · September 8, 2026
- Brand & Trademark UsageWhen you may use our name and logo and when you may not, how we use other people's marks, and where to report brand misuse.What we claim, stated precisely · Using our name in text · Using our logo · Things you must not do · +7 moreEffective · September 8, 2026
Questions
Contracts & notices
legal@workmonitor.aiPrivacy & data rights
privacy@workmonitor.aiData Protection Officer
dpo@workmonitor.aiSecurity reports
security@workmonitor.aiWhere you hold a signed order form or master agreement with us, that agreement controls to the extent it conflicts with anything published here.