Source
Works council, private phones & privacy by design — found from sitemap — Staffbase
Checked for Staffbase on 29 Oct 2026
- Page
- https://staffbase.com/privacy-data-protection
- Checked
- 29 Oct 2026, 21:57 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:5531a51cb6eab5e172edd2d247c6d3e789540a6984a9580e1ebfa88f8558df4e
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
ISO 27001 SOC 2 Report an error
“please see our Trust Center, including more details about our ISO 27001 and SOC2 Type II certifications.”
-
AI EU AI act Report an error
“We classify all AI features against the EU AI Act framework and we conduct continuous reviews to adapt to the evolving regulatory landscape.”
-
AI subprocessors Report an error
“All personal data processed by AI features is handled strictly in accordance with our contractual obligations, flowing only through approved sub-processors, and remaining within defined legal and geographical boundaries.”
-
Employee training Report an error
“For all of our employees, we provide annual security and data protection training as well as frequent awareness updates about recent security and privacy risks.”
-
DPA scope Report an error
“We have a DPA covering key data protection legislation, including the GDPR, US State Privacy Laws, Australian Privacy Laws, and Canadian Privacy Laws.”
-
By design Report an error
“Our security and legal team review new product functionalities according to stringent security, privacy, and AI guidelines throughout the entire software development cycle.”
-
Review diligence Report an error
“Prior to engaging a sub-processor, our security and legal team conduct due diligence and we enter into data processing agreements with the relevant company. Our current sub-processors are listed at: https://staffbase.com/legal/subprocessors.”
-
Data breach response Report an error
“We have set up data breach response plans to promptly and effectively identify, solve, and mitigate incidents that involve personal data of our customers.”
-
Government requests Report an error
“In general, Staffbase does not disclose personal data or customer data in response to a data disclosure request from a law enforcement agency or government authority.”
-
Deletion on exit Report an error
“When Staffbase and a customer part ways, we will delete or return all personal data in accordance with the DPA.”
-
Retention Report an error
“Customer’s personal data is retained by us for the duration of the customer relationship unless it’s already deleted by the customer or by us on customer’s request.”
-
Access controls Report an error
“Our customers can manage access rights to customer data by giving a certain role to specific users.”
-
Encryption Report an error
“Our product and system communication is well encrypted.”
-
Locations Report an error
“Staffbase currently offers three hosting locations for our servers hosted by Microsoft Azure: EU, US, and Australia.”
-
Customer controls Report an error
“A powerful suite of customizable settings and tools also afford our customers the autonomy to further define their own security and privacy parameters.”
Scores citing this record
- The Data Protection Officer Works council, private phones & privacy by design
- The Data Protection Officer Integration, identity & administration
- The Data Protection Officer European sovereignty
- The Frontline Operations Lead Works council, private phones & privacy by design
- The Frontline Operations Lead Integration, identity & administration
- The Frontline Operations Lead European sovereignty
- The Internal Communications Lead Works council, private phones & privacy by design
- The Internal Communications Lead Integration, identity & administration
- The Internal Communications Lead European sovereignty
- The Microsoft 365 Administrator Works council, private phones & privacy by design
- The Microsoft 365 Administrator Integration, identity & administration
- The Microsoft 365 Administrator European sovereignty
- The Skeptic Works council, private phones & privacy by design
- The Skeptic Integration, identity & administration
- The Skeptic European sovereignty
- The Works Council Member Works council, private phones & privacy by design
- The Works Council Member Integration, identity & administration
- The Works Council Member European sovereignty