Security / trust page — Geckoboard

Cited by

Facts read from this source

• Certifications Report an error

  “Payment Card Industry Data Security Standard (PCI DSS) compliance Cloud Application Security Assessment (CASA) certification General Data Protection Regulation (GDPR) compliance California Consumer Privacy Act (CCPA) compliance”

• Data minimization Report an error

  “Geckoboard follows a data minimization approach. We limit what we collect to what’s directly necessary to display your metrics.”

• Enterprise field import controls Report an error

  “On Enterprise plans, granular import controls enable you to choose exactly which fields are imported, allowing you to limit data exposure further.”

• Encryption in transit Report an error

  “In transit: All communication between your browser and Geckoboard is encrypted using HTTPS with 256-bit TLS encryption.”

• Encryption at rest Report an error

  “At rest: Credentials for connected services are encrypted using the AES-GCM cipher with unique 256-bit keys for each service. Passwords are stored using bcrypt.”

• Role based permissions Report an error

  “Role-based permissions: Assign users as owners, admins, organization view-only, or dashboard view-only, each with different levels of access.”

• Ip restrictions Report an error

  “IP restrictions: Limit dashboard access to specific networks and devices.”

• SSO Report an error

  “Single Sign-On (SSO): Enterprise plans support SSO with Okta, Azure AD, and other SAML-based identity providers, enabling you to manage Geckoboard access centrally.”

• Vulnerability scans Report an error

  “Quarterly vulnerability scans as part of PCI DSS compliance.”

• Penetration testing Report an error

  “Annual third-party penetration tests on the application and infrastructure.”

• Bug bounty Report an error

  “A bug bounty program that invites security researchers to report vulnerabilities responsibly.”

• DPA available Report an error

  “Data Processing Agreement (DPA)”

• Founding Report an error

  “Geckoboard was founded in 2010 in London, and for over 15 years, we’ve helped teams of all sizes track their most important metrics securely.”

• Data freshness Report an error

  “Your dashboards update automatically so your team always sees current information.”

• Secure authentication Report an error

  “You create connections to services such as Salesforce, Zendesk, Google Sheets, or other data sources using secure authentication.”

Scores citing this record

• The Data Analyst Access control, administration & portability
• The Data Analyst European sovereignty
• The Finance Controller Access control, administration & portability
• The Finance Controller European sovereignty
• The IT Administrator Access control, administration & portability
• The IT Administrator European sovereignty
• The Managing Director Access control, administration & portability
• The Managing Director European sovereignty
• The SaaS Product Lead Access control, administration & portability
• The SaaS Product Lead European sovereignty
• The SaaS Product Lead Pricing transparency
• The Skeptic Access control, administration & portability
• The Skeptic European sovereignty