Security / trust page — found from the homepage — Staffbase

Cited by

Facts read from this source

• Region options Report an error

  “Staffbase customers can choose between EU hosting or US hosting for the services.”

• EU details Report an error

  “The EU Staffbase servers are hosted by Microsoft Azure (Employee App/Intranet and Staffbase Email) and Amazon Web Services (Email Classic) in Frankfurt, Germany. These facilities are compliant with ISO 27001 and SOC 2.”

• US details Report an error

  “North American Staffbase servers are hosted by Microsoft Azure (Employee App/Intranet and Staffbase Email) and Amazon Web Services (Email Classic). These facilities are compliant with ISO 27001 and SOC 2. Hosting is at Azure’s secure facilities in Virginia, USA (Employee App/Intranet and Staffbase Email) and at AWS Oregon (Email Classic).”

• Australia details Report an error

  “Australian Staffbase servers are hosted by Microsoft Azure (Employee App/Intranet and Staffbase Email). These facilities are located in Australia East (NSW) with redundancies in Australia South-East (VIC) and are compliant with ISO 27001 as well as SOC 2.”

• Bug bounty Report an error

  “External hackers are also welcome to submit findings with CVSS ratings >= 9.0 through our public page here and automatically get invited to our private bug bounty program at hackerone.com.”

• AI EU AI act Report an error

  “Our AI features comply with the EU AI Act and follow clear principles of transparency, accountability, and human oversight.”

• AI isolation Report an error

  “All AI features run in secure, isolated environments with strong encryption and no sharing of customer prompts or outputs.”

• AI toggle Report an error

  “AI features can be turned off at any time.”

• DPA GDPR Report an error

  “Staffbase offers GDPR-compliant data processing agreements (DPAs) for our customers.”

• GDPR program Report an error

  “Staffbase complies with the requirements of the EU General Data Protection Regulation and provides a secure communication platform that protects employee and customer data equally.”

• HIPAA Report an error

  “The HIPAA requirements for a business associate are met through Staffbase’s ISO 27001 certification. In addition, Staffbase has drafted a Business Associate Agreement (BAA) that is tailored to our services and meets the HIPAA requirements.”

• CCPA Report an error

  “Staffbase, as a ‘service provider’, complies with the CCPA rules. We support customers with their obligations under the CCPA and our Data Processing Agreement contains a specific section on Staffbase’s obligations towards customers under the CCPA.”

• ISO 27001 SOC 2 Report an error

  “All Staffbase certifications and compliance documents are available at the Staffbase Trust Center.”

• Subprocessor page Report an error

  “More information on our providers can be found at our subprocessor page.”

• Scale Report an error

  “Over 2000 businesses and over one million of their employees around the globe rely on the Staffbase platform and products every day”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Compliance Counsel Retention, discovery & co-determination
• The Compliance Counsel Deployment & data custody
• The Compliance Counsel European sovereignty
• The Platform Engineer Deployment & data custody
• The Platform Engineer European sovereignty
• The Security Officer Deployment & data custody
• The Security Officer European sovereignty
• The Skeptic Deployment & data custody
• The Skeptic European sovereignty
• The Team Lead Deployment & data custody
• The Team Lead European sovereignty
• The Works Council Advocate Retention, discovery & co-determination
• The Works Council Advocate Deployment & data custody
• The Works Council Advocate European sovereignty