Trust Center
Data Processing Addendum (DPA)
Hercules provides a DPA template that defines controller/processor responsibilities, processing scope, and operational obligations for security and privacy.
Last updated: 2026-03-21
Scope: simulation campaigns, employee targeting metadata, and compliance reporting outputs.
Security measures: tenant segregation, strict auth controls, and validated API inputs.
Subprocessors: listed in the public register with current processing purpose.
Customer review support: procurement/legal review requests are handled through the Trust contact channel.
Incident Response Summary Included in DPA Reviews
- Notification: Confirmed customer-impacting incidents are communicated to affected customer contacts with severity, scope, and immediate mitigation guidance.
- Escalation: Security and engineering leads own containment; leadership and legal/compliance stakeholders are engaged based on incident class.
Downloadable Artifact
Current DPA scope and review workflow summary for legal/procurement teams.
Download DPA template summaryRequest the latest DPA template: support@herculessuite.io