Skip to content
Chat with us

Trust centre

Everything a buyer's counsel asks for, in one place.

Who processes your data, under what agreement, how the model is used, and what we deliberately never built. Including the list of things we cannot claim. That list is the point.

Six documents, each one dated to the day it was actually touched.

  • The subprocessor register

    Every company that touches your data, named, with what it does, what it touches, and where it runs. 11 today, all of them in the United States.

    Last updated August 4, 2026

    Read the register
  • Data Processing Agreement

    The agreement governing how Kordis processes personal data on your behalf, written so your counsel can review it today, not after you sign.

    Last updated August 4, 2026

    Read the DPA
  • Privacy Policy

    What we collect, why, how long we keep it, and the rights you and your workers have over it under PIPEDA.

    Last updated August 4, 2026

    Read the policy
  • How Kordis uses AI

    Where AI drafts and stages work, where a person at your agency has to approve it, and what it is never allowed to do on its own.

    Last updated August 20, 2026

    Read the boundary
  • Requesting your data

    How to ask for an export or a deletion, what the law still requires us to keep regardless, and what happens to the rest.

    Last updated August 4, 2026

    Read your rights
  • Report a security issue

    Found a vulnerability. Here is exactly where to send it, what not to do while you demonstrate it, and what happens after it lands.

    Last updated August 20, 2026

    Read the process

What Kordis has deliberately chosen not to build.

  • No client invoicing

    No AR aging, no invoices generated on your clients' behalf. That stays with your own books.

  • No margin

    No markup calculated between what a client pays and what a worker is paid.

  • No bill rate

    No client-facing rate computed or stored on Kordis's own authority.

  • No Kordis timesheet object

    The client's hours file is the record. There is nothing in-app to create, edit, or approve as a timesheet.

  • No dialing-hours restriction

    No window computed from a jurisdiction. Outreach runs on your own judgment, not a formula.

  • No consent register

    No opt-out list to maintain inside the product. That decision stays with your agency.

  • No worker location tracking

    The dispatch map groups candidate origins into map cells with an id. It never stores or shows a worker's coordinates.

  • No money calculation

    Hours are recorded from your client's own file, never derived from a scheduled shift. Kordis never calculates what anyone is owed.

Read the security page next.

Five claims, each one built, tested, and checkable from inside the product.

Run your real operation for two weeks. No card to start, nothing charged.

  • No card to start
  • Nothing charged
  • Cancel whenever
  • Guided setup
Kordis trust centre