Data Processing Agreement

This Data Processing Agreement ("DPA") supplements our Terms of Service and Privacy Policy. It applies when AgCore processes personal information on your behalf as a data processor under the Australian Privacy Act 1988.

We process personal information only on your documented instructions and for the purpose of providing the AgCore platform services. Processing activities include: storing farm and workforce data, generating compliance reports, facilitating payroll integrations, and providing analytics.

We implement appropriate technical and organisational measures including: encryption of sensitive fields at rest, encryption in transit, role-based access controls, database-enforced row-level security between organisations, and incident response procedures.

We use the following categories of sub-processors: cloud infrastructure providers, payment processors (Stripe), and email delivery services. We do not use any third-party web-analytics sub-processor. A current list of sub-processors is available upon request. We will notify you of any changes to sub-processors.

We will assist you in fulfilling data subject access requests, correction requests, and deletion requests. For enterprise customers, please contact us at privacy@agcore.com.au to discuss custom DPA terms.

In the event of a data breach affecting personal information, we will notify you within 72 hours of becoming aware of the breach, in accordance with the Notifiable Data Breaches scheme under the Privacy Act.