Security / trust page (with legal notice) — Klaxoon

Cited by

Facts read from this source

• Residency Report an error

  “Depending on the offer subscribed to, user data is hosted in data centers located either in Europe or the USA.”

• GDPR CCPA Report an error

  “For Europe-based hosting, European data protection legislation applies (including GDPR compliance). For USA-based hosting, the same data protection measures as European hosting apply (including CCPA compliance).”

• SSO Report an error

  “Corporate Identity federation (private SSO): specific SSO integration with any SAMLv2 or OIDC-compatible identity provider”

• Encryption transit Report an error

  “In transit: All exchanges are carried out in HTTPS. The session is encrypted via TLS 1.2 or higher. Only strong ciphers are supported.”

• Encryption at rest Report an error

  “At rest: Users-generated data is encrypted at rest with volume encryption compliant with FIPS 140 standard. Encryption level: AES-256.”

• Password hashing Report an error

  “Passwords of Klaxoon users are hashed – the algorithm used: Bcrypt.”

• Pci dss payment Report an error

  “All payments are processed by our PCI-DSS-certified partner, Klaxoon does not store payment details at any time.”

• Pen test Report an error

  “External penetration tests are performed at least yearly by independent third party organizations certified by the French National Agency for Information Systems Security (ANSSI).”

• Bug bounty Report an error

  “Klaxoon runs a private Bug Bounty program for security researchers to report potential security issues to our security team.”

• Logs retention Report an error

  “Logs are centralized to facilitate analysis and correlation, and archived and encrypted for 12 months on dedicated secure servers.”

• ISO 27001 Report an error

  “Klaxoon is certified ISO 27001, the administration of Klaxoon infrastructure is managed by a dedicated & certified operations team.”

• SOC 2 Report an error

  “Klaxoon is compliant with SOC2 Type2 standards (Service Organization Control 2, Type 2). An annual audit is performed, addressing the suitability of design and the operating effectiveness of Klaxoon controls.”

• Iso27018 infra Report an error

  “Personal data is hosted on an ISO 27018-certified infrastructure.”

• Access controls Report an error

  “Activity locking: hosts can disable the option to join an activity via a URL or a session code.”

• Optional restrictions Report an error

  “Restricting access to members of an entire organization: prevents external users from accessing your organization's activities. Restricting file uploads and downloads: removes the option of uploading files during activities for declared users, as well as downloading content from Klaxoon. Network/IP restrictions: restricts access to Klaxoon when using network and IP level filters.”

• Availability Report an error

  “Klaxoon service is available and monitored 24/7. Over the last 12 months, measured service availability is above 99.5%.”

• Backup Report an error

  “Full backups are saved encrypted to a remote location at least once per day. Transactions are saved continuously. Backup restoration tests are performed regularly. Backups are kept for 4 weeks.”

• Disaster recovery Report an error

  “Service recovery time (RTO): 72 hours Maximum allowable data loss (RPO): 24 hours.”

• Entity Report an error

  “The website (https://klaxoon.com) is operated by Wrike, Inc. registered at 550 West B Street, Floor 4, PMB 2305, San Diego, CA 92101, United States.”

• DPA available Report an error

  “For more information about how we process Personal Data, please read our Privacy Policy and our Data Processing Addendum.”

• AI addendum Report an error

  “3.4 Klaxoon AI Addendum Klaxoon AI Addendum”

• API terms Report an error

  “3.5 Klaxoon API - Terms of use Klaxoon API - Terms of use”

• Wcag Report an error

  “Klaxoon is partially conformant with WCAG 2.1 level AA and RGAA 4.1. Partially conformant means that some parts of the content do not fully conform to the accessibility standard.”

• Wcag score Report an error

  “Our average compliance score against WCAG 2.1 level AA criterias is currently 87% on this scope.”

• Accessibility features Report an error

  “High contrast mode: Accessibility toggle is available from the login form and in the profile section;”

• Malware scanning Report an error

  “Klaxoon platform is scanned continuously 24/7, and each uploaded file is scanned in real time.”

• Datacenter tier Report an error

  “Datacenters hosting the service meet Tier III requirements, physical access is controlled and monitored.”

• Brand Report an error

  “The Klaxoon brand is evolving into Klaxoon by Wrike. Learn more”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Microsoft 365 Admin Workshop facilitation & participation
• The Microsoft 365 Admin Sharing, permissions & administration
• The Microsoft 365 Admin Security, AI controls & deployment
• The Microsoft 365 Admin European sovereignty
• The Product Team Lead Workshop facilitation & participation
• The Product Team Lead Sharing, permissions & administration
• The Product Team Lead Security, AI controls & deployment
• The Product Team Lead European sovereignty
• The Public-Sector Project Lead Workshop facilitation & participation
• The Public-Sector Project Lead Sharing, permissions & administration
• The Public-Sector Project Lead Security, AI controls & deployment
• The Public-Sector Project Lead European sovereignty
• The Skeptic Workshop facilitation & participation
• The Skeptic Sharing, permissions & administration
• The Skeptic Security, AI controls & deployment
• The Skeptic European sovereignty
• The Works Council Member Workshop facilitation & participation
• The Works Council Member Sharing, permissions & administration
• The Works Council Member Security, AI controls & deployment
• The Works Council Member European sovereignty
• The Workshop Facilitator Workshop facilitation & participation
• The Workshop Facilitator Sharing, permissions & administration
• The Workshop Facilitator Security, AI controls & deployment
• The Workshop Facilitator European sovereignty