Encryption & access control — found from sitemap — Staffbase

Cited by

Facts read from this source

• EU germany Report an error

  “The EU Staffbase servers are hosted by Microsoft Azure (Employee App/Intranet and Staffbase Email) and Amazon Web Services (Email Classic) in Frankfurt, Germany. These facilities are compliant with ISO 27001 and SOC 2.”

• US Report an error

  “Hosting is at Azure’s secure facilities in Virginia, USA (Employee App/Intranet and Staffbase Email) and at AWS Oregon (Email Classic).”

• Australia Report an error

  “Australian Staffbase servers are hosted by Microsoft Azure (Employee App/Intranet and Staffbase Email). These facilities are located in Australia East (NSW) with redundancies in Australia South-East (VIC) and are compliant with ISO 27001 as well as SOC 2.”

• Region choice Report an error

  “Staffbase customers can choose between EU hosting or US hosting for the services.”

• ISO 27001 SOC 2 Report an error

  “All Staffbase certifications and compliance documents are available at the Staffbase Trust Center.”

• HIPAA Report an error

  “The HIPAA requirements for a business associate are met through Staffbase’s ISO 27001 certification. In addition, Staffbase has drafted a Business Associate Agreement (BAA) that is tailored to our services and meets the HIPAA requirements.”

• GDPR Report an error

  “Staffbase complies with the requirements of the EU General Data Protection Regulation and provides a secure communication platform that protects employee and customer data equally.”

• DPA Report an error

  “Staffbase offers GDPR-compliant data processing agreements (DPAs) for our customers.”

• CCPA Report an error

  “Staffbase, as a ‘service provider’, complies with the CCPA rules. We support customers with their obligations under the CCPA and our Data Processing Agreement contains a specific section on Staffbase’s obligations towards customers under the CCPA.”

• EU AI act Report an error

  “Our AI features comply with the EU AI Act and follow clear principles of transparency, accountability, and human oversight.”

• Bug bounty Report an error

  “External hackers are also welcome to submit findings with CVSS ratings >= 9.0 through our public page here and automatically get invited to our private bug bounty program at hackerone.com.”

• Page Report an error

  “More information on our providers can be found at our subprocessor page.”

• AI privacy control Report an error

  “AI features can be turned off at any time.”

• AI isolated Report an error

  “All AI features run in secure, isolated environments with strong encryption and no sharing of customer prompts or outputs.”

• Trust center Report an error

  “Visit our Trust Center”

• Certifications facilities Report an error

  “These facilities are compliant with ISO 27001 and SOC 2.”

Scores citing this record

• The Compliance Counsel Deployment & data custody
• The Compliance Counsel European sovereignty
• The Platform Engineer European sovereignty
• The Security Officer European sovereignty
• The Team Lead Deployment & data custody
• The Team Lead European sovereignty
• The Works Council Advocate European sovereignty