Security / trust page — found from the homepage — SmartSurvey

Cited by

Facts read from this source

• Data location Report an error

  “All the data collected on behalf of our users is kept in the UK in a secure data centre.”

• Encryption Report an error

  “Yes, all data is encrypted both in transmission using TLS 1.2 and at rest using SQL Transparent Data Encryption (TDE).”

• Data subject rights tools Report an error

  “Our app makes it simple to comply with requests from data subjects for the exercising of their rights, such as erasure, restriction, rectification, or portability.”

• Security features Report an error

  “Verified Email Sending with SPF and DKIM SSL protected surveys 3rd-party penetration tests carried out annually Data encrypted in transit and at rest (TLS 1.2) Password Policies to define complexity and expiration windows Two-Factor Authentication via app or SMS IP Whitelisting Password protection of survey reports Highly configurable permissions settings for team working. Default settings are the most secure / restrictive Simple email opt-out for respondents Anonymous responses if required Data Retention policy means that deleted data is not retained. Capacity for bespoke contracts and security documentation for large clients.”

• Backup retention Report an error

  “Once deleted, the survey will only exist on backups, which can persist for up to 21 days before it is fully erased.”

• Anonymous surveys Report an error

  “Yes, surveys can be set to be anonymised. This will mean that the IP address (and email address, for surveys distributed via email) of the respondent will not be recorded.”

• Ip tracking default Report an error

  “By default, SmartSurvey records the IP address of every respondent.”

• Cyber essentials plus Report an error

  “We are Cyber Essentials Plus Certified.”

• Subcontractor ans Report an error

  “ANS is responsible for providing us with dedicated servers for hosting survey data and physically securing those servers.”

• Backups location Report an error

  “We store backups in a separate physical location.”

• Breach notification Report an error

  “As soon as SmartSurvey discovers a data breach has occurred or even suspects a data breach, it will communicate this to you as soon as possible and will provide you all the details to help you comply with your GDPR breach notification responsibilities.”

• End of service Report an error

  “SmartSurvey provides you access to all of your data through your account, this can be backed-up, rectified or deleted in accordance to your needs.”

• Export Report an error

  “SmartSurvey allows you to find, edit, export, and delete specific responses for a survey.”

• Staff access Report an error

  “No one will access your data unless they have the credentials to access your account, you publish that data, or our staff for the purposes of providing you support or fixing a technical issue.”

• Security scanning Report an error

  “SmartSurvey runs extensive network and infrastructure security scans using Tenable Nessus software.”

• White paper Report an error

  “we are working on an information security white paper that will explain the infrastructure, encryption, and other measures that are in place to protect data. This will be available on request.”

• Staff location Report an error

  “Our servers are based in the UK.”

• Deletion process Report an error

  “At the moment, deletion of surveys and their associated data has to be initiated manually, though we are working on features to automate this to an extent, if the user desires it.”

• Confidentiality training Report an error

  “All SmartSurvey employees have signed confidentiality provisions and are trained regularly on data protection and GDPR.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Academic Researcher Survey analysis & reporting
• The Academic Researcher Consent, GDPR & respondent data
• The Academic Researcher Hosting choice, teams & portability
• The Academic Researcher European sovereignty
• The Data Protection Officer Survey analysis & reporting
• The Data Protection Officer Consent, GDPR & respondent data
• The Data Protection Officer Hosting choice, teams & portability
• The Data Protection Officer European sovereignty
• The HR Lead Survey analysis & reporting
• The HR Lead Consent, GDPR & respondent data
• The HR Lead Hosting choice, teams & portability
• The HR Lead European sovereignty
• The Market Researcher Survey analysis & reporting
• The Market Researcher Consent, GDPR & respondent data
• The Market Researcher Hosting choice, teams & portability
• The Market Researcher European sovereignty
• The Operations Manager Survey analysis & reporting
• The Operations Manager Consent, GDPR & respondent data
• The Operations Manager Hosting choice, teams & portability
• The Operations Manager European sovereignty
• The Skeptic Survey analysis & reporting
• The Skeptic Consent, GDPR & respondent data
• The Skeptic Hosting choice, teams & portability
• The Skeptic European sovereignty