Updated 23 September 2026

Pilot data-processing terms

These terms describe how Salary Crossing processes client information for a pilot organisation.

Instructions and duration

Salary Crossing processes case data only to provide, secure and support the workspace according to the organisation’s use of the service. Processing lasts for the pilot and the configured retention period, unless law requires otherwise.

People and information

Data subjects may include candidates, employees, dependants and adviser users. Data may include identity and contact details, compensation, deductions, pension and benefits, household costs, employment terms and information contained in uploaded evidence. Users must not upload special-category data unless it is essential and lawful for the case.

Confidentiality and security

Access is organisation-scoped and role-controlled. The service uses encryption, private storage, malware scanning, audit logs, expiring sessions and approval gates. Personnel and providers with access are bound by confidentiality duties appropriate to their role.

Assistance and incidents

Salary Crossing will provide reasonable assistance with data-subject requests, security assessments and deletion. A confirmed personal-data breach affecting an organisation’s data will be reported to its nominated contact without undue delay, with available facts and mitigation steps.

Subprocessors, deletion and audit

Approved providers are listed on the subprocessors page. Material changes will be notified before use where practicable. At termination or authorised deletion, active data is removed and backup copies expire within 30 days. Reasonable evidence of these controls will be supplied on request.

These pilot terms require specialist legal review before general commercial release. Contact [email protected] for an organisation-specific signed agreement.