1. Purpose of the service
RHPrisma is a platform to run and monitor Human Capital assessments. It includes organizational surveys (workplace climate, engagement, exit interview, psychological safety, among others) read as a 0 to 100 health score per dimension, the NOM-035-STPS-2018 questionnaires (Reference Guides I, II and III) scored with the criteria of the standard, and knowledge exams with an answer key (labor law, payroll, ethics and compliance, trust screening, leadership, among others).
The customer organization (the "Customer") registers its staff, sends instruments to the people it chooses and reviews results, PDF records and compliance progress in its panel.
The Vacancies module lets the Customer publish vacancies on a job board, receive applications with CVs, track them by stage, send notices to applicants and analyze CVs with artificial intelligence.
The Professional plan operations modules include time tracking (workday, hours per cost center, project cost and profitability, time off and leave signed by the direct manager, and the portal where each person logs their own), performance reviews at 90, 180, 270 and 360 degrees, and an inventory of company equipment with a record of who received each item.
RHPrisma time and absence records are a management tool. They are not a certified attendance system and do not replace the employer obligations regarding working hours, rest, holidays, overtime pay and their records, which remain the Customer responsibility. The hourly cost and profitability the portal computes come from the salary bands and data the Customer enters: they are a management input, not accounting or tax information, and the inventory value uses straight-line depreciation, which is not an appraisal.
2. Scope of the results
Results are a management input. They do not by themselves constitute a certification, an employment ruling, a medical or psychological diagnosis, or a decision about any person.
The NOM-035 questionnaires are implemented according to the reference guides published in the Official Gazette of the Federation. Running them in RHPrisma helps meet the standard but does not meet it on its own: the Customer remains responsible for, among other things, having a psychosocial risk prevention policy, adopting the measures and programs that correspond to each risk level, referring for clinical assessment anyone who needs it under Guide I, and keeping the records the standard requires.
The Guide I result only indicates whether the person should be referred. The assessment itself belongs to a health professional. If you spot a difference between the portal calculation and the official text of the standard, let us know at [email protected] so we can fix it.
The Customer decides which instruments to run and with whom, and is responsible for checking that they suit its purpose. The content of exams created by the Customer is its sole responsibility.
The artificial intelligence CV analysis is an aid: it summarizes and compares the CV with the requirements the Customer enters, may contain errors and does not replace review by a person. The Customer must not make decisions about an applicant based solely on that analysis.
3. Access and accounts
Access to the portal is through an account authorized by the Provider or invited by the Customer, using Google, Microsoft or a code sent to their email. Each organization manages its members and their roles (owner, admin or member).
You are responsible for the activity carried out from your account and for keeping your access confidential. You must report any unauthorized use.
4. Customer obligations toward assessed people
The Customer is responsible for the data of the people it assesses. It agrees to: (a) tell them what each instrument is for. (b) Use the results only for that legitimate purpose and never in a discriminatory way. (c) Not base adverse decisions about a person solely on a portal result. (d) Keep answers and results confidential, especially the sensitive data of the NOM-035 questionnaires. (e) Handle the ARCO rights requests of those people. (f) Have its own privacy notice towards them and a legal basis to assess them. (g) If it assesses minors, obtain the consent of whoever holds parental authority or guardianship. (h) Send invitations only to people with whom it has a legitimate relationship, such as employees or candidates, and to correct email addresses. (i) Publish vacancies and requirements that comply with the law, without requesting or using age, sex, marital status, pregnancy, appearance or other conditions the law prohibits using to discriminate, except where the law itself allows it. (j) Delete an applicant data when appropriate, including cancellation requests.
Before starting any instrument, the portal asks the person for express consent, in line with the Privacy Notice.
The Customer agrees to hold the Provider harmless from any third-party claim, including from assessed people and authorities, arising from a breach of these obligations or from decisions it makes based on the results.
5. Running instruments and secure mode
Each invitation creates a unique link that allows a single submission and issues a verifiable folio. The assessed person is not shown their result.
Instruments are answered in secure mode: they open in full screen, copy, paste and the context menu are blocked, and exits from the screen are recorded. If exits reach half the number of questions, the attempt is cancelled as an anomaly and recorded as such.
The time available is the one each instrument sets, with a minimum based on its number of questions. Some instruments have no time limit. When time runs out, the answers recorded so far are submitted.
Secure mode reduces, but does not eliminate, the chance of outside help or of someone else answering, for example from another device. The Provider does not warrant the identity of whoever answers or that they answer without help.
6. Acceptable use
You agree not to: (a) share your access with unauthorized third parties. (b) Copy, publish or redistribute exam content. (c) Automate access, scrape, or subject the service to abnormal load. (d) Attempt to breach security, secure mode or portal controls. (e) Use the service for unlawful purposes or in a way that infringes third-party rights. (f) Upload CVs or personal data without a legal basis to process them.
7. Plans, pricing and billing
The Free plan is offered at no cost. The Standard and Professional plans are paid, with a flat monthly fee per company (not per employee), stated in Mexican pesos (MXN) and excluding VAT unless stated otherwise. There is no lock-in and no minimum number of users. Each plan is limited by the number of people assessed per month, the instruments that can be sent, assessment size, open vacancies at a time, invitations per month (re-sends count), AI CV analyses per month and per day, storage for CVs and documents, team users, performance reviews per month and the modules included —time and leave tracking and AI CV analysis are only included in the Professional plan—, as published at /planes. Paid plans are billed monthly or yearly in advance (12 months for the price of 10). If the Customer cancels a yearly plan, the service stays active until the paid period ends.
A person assessed is each different person to whom the Customer sends at least one assessment within a calendar month, regardless of how many they receive. Monthly quotas renew on the 1st of each month (UTC), do not roll over and are not refundable. Failed CV analyses are not deducted from the quota. When a limit is reached, the portal pauses new sends, analyses, vacancies or invitations until the quota renews or the Customer changes plans; anything already in progress is not interrupted.
Each organization's first monthly Standard subscription includes a 7-day free trial; the first charge is made when those days end, and if the Customer cancels before then nothing is charged. When the card is added, Mercado Pago may place a small temporary charge to validate it, which it refunds automatically; it is not a RHPrisma charge. Professional and yearly payment include no trial days. Paid plans are bought and paid for only through Mercado Pago. Payments are processed through Mercado Pago. Monthly billing is a subscription charged automatically to a card; the yearly payment (12 months for the price of 10) is a one-time payment that also accepts OXXO and Mercado Pago balance, and does not auto-renew. RHPrisma does not store card details: Mercado Pago handles them. The plan turns on when Mercado Pago confirms the payment or the subscription. RHPrisma does not currently issue Mexican tax invoices (CFDI) for these charges: the payment receipt is the one Mercado Pago provides. The Customer may register tax details in the portal and, when RHPrisma starts issuing CFDI, those details will be used; the Customer is responsible for their accuracy.
You may cancel at any time. Cancellation takes effect at the end of the current billing period. No refunds are issued for periods already started, except where required by applicable law.
If a payment is not made or the subscription is cancelled, the organization moves to the Free plan and is notified by email. Its information is kept and no vacancy is closed and no user is removed, but anything new (sends, vacancies opened, analyses and team invitations) is subject to that plan limits.
The Provider may change prices and plan features. Changes will be communicated with reasonable notice and will not affect a period already paid for.
8. Intellectual property and content
The portal, its software, design, trademarks and the content of the exams and surveys written by the Provider are owned by RHPrisma or its licensors, and are licensed to the Customer solely to administer them to its staff or candidates within the portal. The NOM-035 questionnaires reproduce official guides in the public domain.
Exams created by the Customer and the information it registers (staff, answers and results) remain the Customer property. No other rights are transferred to you other than a limited, revocable, non-exclusive license to use the service under these Terms. The Customer authorizes the Provider to host and process that information solely to provide the service.
9. Personal data
The processing of personal data is governed by the Privacy Notice, available at /privacidad, which forms an integral part of these Terms. For the data of assessed people, the Customer acts as controller and the Provider as processor.
10. Availability and service changes
The service is provided "as is" and "as available". The Provider may perform maintenance, update, suspend or discontinue the service in whole or in part, giving notice when reasonably possible.
11. Disclaimer of warranties
To the maximum extent permitted by law, the Provider does not warrant that the service will be uninterrupted or error-free, or that results are fit for a particular purpose. Use of the service is at your own risk.
The Provider does not warrant delivery of emails: they may be filtered as spam or rejected by the recipient server. Nor is it liable for failures of external providers, such as hosting, email or payments, or for acts of God or force majeure.
12. Limitation of liability
To the extent permitted by law, the Provider's total liability arising from the service is limited to the amount the Customer paid in the three (3) months before the event giving rise to the claim. The Provider is not liable for indirect, incidental or consequential damages or lost profits, nor for decisions the Customer makes based on the results. This limitation does not apply in cases of willful misconduct or where the law does not allow liability to be limited.
13. Termination
The Provider may suspend or terminate access if these Terms are breached or the service is used in a way that endangers its security or integrity.
Before the relationship ends, the Customer must download the information it needs. After that it is deleted under section 14 and the Privacy Notice. RHPrisma does not provide copies or backups of the Customer information.
14. Data retention, inactivity and backups
If the organization is on the Free plan, or its paid plan ended and was not renewed, and 10 consecutive months go by without anyone from the organization signing in to the portal, RHPrisma will delete the organization account and all its information: staff, assessments, answers, results, records, vacancies, candidates and CVs. Deletion is permanent and cannot be undone.
Before deleting it, RHPrisma will email the organization administrators at least 30 days in advance. If anyone from the organization signs in before that date, the account stays active and the period starts over.
While the organization has a current paid plan, its information is not deleted for inactivity.
The Customer is responsible for downloading and keeping the information it needs, for example each person's PDF record and the candidates' CVs, before its account is deleted or the service ends. RHPrisma does not provide backups or copies of the Customer information. The service's internal backups exist only to recover it from technical failures, are not available to customers and are kept only as long as needed for that purpose.
15. Changes to the Terms
The Provider may update these Terms. The current version will be published on this page with its update date. When a change is material, the Customer will be notified by email or within the portal. Continued use of the service after publication constitutes acceptance of the changes.
16. Governing law and jurisdiction
These Terms are governed by the laws of the United Mexican States. Any dispute will be submitted to the competent courts of Mexico, waiving any other jurisdiction that may apply.
17. Contact
For any matter relating to these Terms: [email protected].
Questions, or want to exercise your rights?
Write to us and we will reply within the legal deadlines.
[email protected]