Privacy policy — found from the homepage — Staffbase

Cited by

Facts read from this source

• Certifications Report an error

  “please see our Trust Center, including more details about our ISO 27001 and SOC2 Type II certifications.”

• DPA scope Report an error

  “We have a DPA covering key data protection legislation, including the GDPR, US State Privacy Laws, Australian Privacy Laws, and Canadian Privacy Laws.”

• DPA URL Report an error

  “Our DPA can be found at: https://staffbase.com/legal/dpa.”

• AI act Report an error

  “We classify all AI features against the EU AI Act framework and we conduct continuous reviews to adapt to the evolving regulatory landscape.”

• Employee training Report an error

  “For all of our employees, we provide annual security and data protection training as well as frequent awareness updates about recent security and privacy risks.”

• Review process Report an error

  “Prior to engaging a sub-processor, our security and legal team conduct due diligence and we enter into data processing agreements with the relevant company.”

• List URL Report an error

  “Our current sub-processors are listed at: https://staffbase.com/legal/subprocessors.”

• Breach response plan Report an error

  “We have set up data breach response plans to promptly and effectively identify, solve, and mitigate incidents that involve personal data of our customers.”

• Government requests Report an error

  “In general, Staffbase does not disclose personal data or customer data in response to a data disclosure request from a law enforcement agency or government authority.”

• Deletion access requests Report an error

  “This means our customers may also request us to delete or access certain information.”

• Retention Report an error

  “Customer’s personal data is retained by us for the duration of the customer relationship unless it’s already deleted by the customer or by us on customer’s request.”

• End of contract Report an error

  “When Staffbase and a customer part ways, we will delete or return all personal data in accordance with the DPA.”

• Access restrictions Report an error

  “Our customers can manage access rights to customer data by giving a certain role to specific users.”

• Encryption Report an error

  “Our product and system communication is well encrypted.”

• Locations Report an error

  “Staffbase currently offers three hosting locations for our servers hosted by Microsoft Azure: EU, US, and Australia.”

Scores citing this record

• The Compliance Counsel Encryption & access control
• The Compliance Counsel Retention, discovery & co-determination
• The Compliance Counsel Deployment & data custody
• The Compliance Counsel European sovereignty
• The Platform Engineer Encryption & access control
• The Platform Engineer Retention, discovery & co-determination
• The Platform Engineer Deployment & data custody
• The Platform Engineer European sovereignty
• The Security Officer Encryption & access control
• The Security Officer Retention, discovery & co-determination
• The Security Officer Deployment & data custody
• The Security Officer European sovereignty
• The Skeptic Encryption & access control
• The Skeptic Retention, discovery & co-determination
• The Skeptic Deployment & data custody
• The Skeptic European sovereignty
• The Team Lead Encryption & access control
• The Team Lead Retention, discovery & co-determination
• The Team Lead Deployment & data custody
• The Works Council Advocate Encryption & access control
• The Works Council Advocate Retention, discovery & co-determination
• The Works Council Advocate Deployment & data custody