The Rules We Bind Ourselves To

The framework agreement governing every Sercxi mandate. Applies uniformly across corridors; jurisdiction-specific rules sit in the annexes.

Commercial mechanics: engaged fee basis, instalment structure, replacement conditions, off-limits and fee-protection triggers. Rates, minimums and retainer amounts are set out in the Engagement Letter and are not published.

Controller-to-controller and processor variants covering GDPR, PDPA, PDPL, APPI and PIPL transfer scenarios.

GDPR obligations, WAADI position, EU AI Act treatment of AI-assisted candidate assessment.

AGG anti-discrimination alignment, AÜG position, works-council consultation clauses.

PDPA obligations, DPO appointment, Do Not Call registry, EA Licence position.

UAE PDPL, DIFC / ADGM free-zone overlay, MoHRE recruitment permit position.

SDAIA PDPL, data-localisation posture, Musaned / Qiwa permit position, Saudisation representation.

APPI cross-border transfer, fee-charging placement licence position, candidate-consent standard.

PIPL Art. 38 outbound posture, no on-shore data collection, standard contract and CAC filing requirements.

The notice provided to every candidate at first contact. Multi-jurisdiction: GDPR, PDPA, PDPL, APPI and PIPL.

Governance for Sercxi's APEX Signal and adjacent AI tooling, aligned with the EU AI Act.

The reciprocal no-raid regime that governs every Sercxi client relationship.

Live list of third parties that process personal data on Sercxi's behalf. Updated on change; 30 days' notice for material additions.

Version history for every document in the Sercxi governance suite.