Data Processing Agreement

For customer workforce records, the customer organisation is generally the controller and SkillProof acts as processor.

SkillProof processes customer data only to provide, secure, support and improve the SkillProof service, or as required by law.

SkillProof may process staff records, user accounts, training records, competency records, assessment submissions, appraisal records, CPD records, development action records, evidence files, certificates, professional registration or check details, compliance status, audit records and billing status.

Customers remain responsible for deciding what data is entered into SkillProof and ensuring they have a lawful basis for using it.

A customer Owner may authorise named Consultancy users to access an approved scope through SkillProof's delegated-access controls. The customer remains responsible for those instructions and can change or revoke access.

The customer and Consultancy must determine and document their respective data protection roles and authority outside SkillProof. SkillProof does not make the Consultancy a customer Owner or transfer the customer's subscription or records.

SkillProof is designed around organisation-level data separation, role-based access controls, private evidence storage, audit logging, secure billing through Stripe and controlled account access.

The platform uses established cloud providers including Vercel, Cloudflare, Supabase and Stripe.

SkillProof uses sub-processors to host, secure, store, process payments and deliver website form enquiries.

The current public sub-processor list is available on the Sub-processors page.

Customers can request export, return or deletion of customer data during offboarding, subject to legal, audit and operational retention requirements.

Trial and cancelled account data is retained for a limited period unless deletion is requested sooner or a different contractual term applies.

For a customer-specific DPA, supplier review or data protection question, contact the privacy team through the SkillProof Contact page.

OneProof Ltd trading as SkillProof. Registered in England and Wales, company number 17334107. Registered office: 124 City Road, London, EC1V 2NX, United Kingdom.

Billing and invoice enquiries: [email protected].