ATLAST SUBSCRIPTION AGREEMENT
(Including Order Form and Data Processing Addendum)
Effective Date: 21/1/26
This Atlast Subscription Agreement (“Agreement”) governs access to and use of the Atlast platform and related services.
This Agreement does not apply to use of the Atlast website or participation in the waitlist, which are governed by separate Website Terms & Conditions.
1. Parties
This Agreement is entered into between:
Atlast Global Technologies
NIF: B24844326
Registered address: Avinguda d’Eduard Maristany 7, 08019, Barcelona, Spain
(“Atlast”, “we”, “us”)
and
Customer
The individual or legal entity accepting this Agreement
(“Customer”, “you”)
2. Order Form (Commercial Terms)
The commercial terms of the subscription are set out in:
- an Order Form signed by both parties, or
- the subscription plan, pricing, billing frequency, and term selected during checkout.
For self-serve subscriptions, the details shown at checkout constitute the Order Form and are incorporated into this Agreement.
Free Trials and Auto-Renewal
If a free trial is offered, unless cancelled before the end of the trial period, the subscription will automatically convert to a paid subscription and Customer will be charged the applicable fees for the next billing period. Subscriptions automatically renew unless cancelled before the end of the current billing period. Cancellation can be completed in the Atlast platform account settings or by emailing billing@atlasthq.com
3. Licence and Use
Atlast grants Customer a non-exclusive, non-transferable, non-sublicensable right to access and use the platform during the subscription term for internal business purposes.
Customer must not:
- copy, modify, or reverse engineer the platform;
- provide access to unauthorised third parties;
- use the platform in breach of applicable law.
4. Customer Responsibilities
Customer is responsible for:
- maintaining confidentiality of login credentials;
- ensuring authorised users comply with this Agreement;
- the accuracy and legality of all data uploaded.
5. Intellectual Property
All rights in the platform, including software, AI agents, workflows, and analytics, remain with Atlast.
Customer retains ownership of Customer Data and grants Atlast a limited licence to process such data solely to provide and improve the services.
6. AI and Decision-Making
- The platform includes AI-powered functionality producing probabilistic outputs.
- AI outputs are designed to support human decision-making only.
- Customer remains solely responsible for hiring decisions and compliance with employment and data protection laws.
- The platform is not intended to carry out fully automated decision-making within the meaning of Article 22 GDPR.
Atlast does not permit AI providers to use Customer Data to train general-purpose models, except where anonymised or explicitly agreed.
7. Confidentiality
Each party shall protect the other party’s confidential information and use it only for purposes related to this Agreement.
8. Data Protection
The Data Processing Addendum (Annex A) forms part of this Agreement.
Additional information regarding data protection practices and authorised subprocessors is available for transparency and does not form part of this Agreement.
9. Warranties and Disclaimers
The platform is provided “as is”.
Atlast warrants that it will provide the services with reasonable skill and care.
All other warranties are excluded to the maximum extent permitted by law.
10. Limitation of Liability
Neither party is liable for indirect or consequential loss.
Atlast’s total aggregate liability is limited to the fees paid by Customer in the 12 months preceding the claim.
Nothing limits liability for fraud or death or personal injury caused by negligence.
11. Term and Termination
This Agreement continues for the subscription term unless terminated earlier for material breach or insolvency.
Upon termination or expiry of this Agreement:
- Customer access to the platform shall cease;
- Customer may request export of Customer Data within 30 days;
- after this period, Atlast shall delete or anonymise Customer Data in accordance with applicable data protection law and Atlast’s data retention policies, unless retention is required by law or for legitimate purposes such as billing, audit, backup retention, or dispute resolution; and
- any retained data remains subject to the confidentiality and data protection obligations under this Agreement.
12. Governing Law and Jurisdiction
This Agreement is governed by the laws of Spain.
If Customer is established in the United Kingdom, nothing prevents proceedings in England and Wales where required by mandatory local law.
Subject to the foregoing, the courts of Barcelona have exclusive jurisdiction.
13. Entire Agreement
This Agreement constitutes the entire agreement between the parties and supersedes all prior agreements relating to its subject matter.
——
ANNEX A – DATA PROCESSING ADDENDUM (DPA)
1. Roles
Customer acts as Data Controller.
Atlast acts as Data Processor.
This DPA applies under:
- Regulation (EU) 2016/679 (GDPR); and
- UK GDPR and the Data Protection Act 2018.
2. Processing Details
- Purpose: recruitment workflows, automation, analytics
- Data subjects: candidates, employees, users
- Data types: identification data, CVs, interview data, communications, assessments
3. Processor Obligations
Atlast shall:
- process personal data only on documented instructions;
- implement appropriate technical and organisational security measures;
- notify Customer of personal data breaches without undue delay;
- ensure personnel are bound by confidentiality obligations.
4. Subprocessors
Customer authorises Atlast to use subprocessors.
Atlast:
- ensures subprocessors are bound by equivalent data protection obligations;
- remains responsible for their acts and omissions.
5. International Transfers
Where data is transferred outside the EEA or UK, appropriate safeguards apply, including:
- EU Standard Contractual Clauses; and
- UK International Data Transfer Addendum or IDTA.
6. Deletion or Return
Upon termination, personal data shall be deleted or returned within a reasonable period, unless retention is required by law, including limited backup retention.
7. Supervisory Authority
- GDPR: determined under Article 56 GDPR
- UK GDPR: UK Information Commissioner’s Office (ICO)
END OF AGREEMENT