Privacy policy — found from the homepage — My Hours

Cited by

Facts read from this source

• Company name Report an error

  “we at Spica International, the company behind My Hours”

• Hq location Report an error

  “HQ in Ljubljana, Slovenia”

• ISO certifications Report an error

  “We are proud holders of multiple ISO certifications: ISO27001:2022, ISO27018 and ISO27017 that applies specifically to cloud solutions like My Hours.”

• Microsoft gold partner Report an error

  “we’ve been able to meet the rigorous requirements set by Microsoft and become a Gold-Certified Partner.”

• GDPR Report an error

  “We are in full compliance with The General Data Protection Regulation (GDPR)”

• CCPA Report an error

  “We are fully compliant with The California Consumer Privacy Act (CCPA)”

• Dcaa Report an error

  “We follow ALL guidelines concerning timekeeping & accounting rules as set by the Defense Contract Audit Agency (DCAA)”

• Provider Report an error

  “Our servers are hosted on Microsoft's cloud computing platform Azure, with the main database center located in Amsterdam, Netherlands, EU.”

• SOC 2 framework Report an error

  “Our server's host, the Microsoft Azure platform, is in full compliance with the SOC II cybersecurity operations framework set by the Assurance Services Executive Committee (ASEC) of the American Institute of Certified Public Accountants (AICPA).”

• Uptime 365d Report an error

  “The average server uptime was 99.98% in the past 365 days.”

• Encryption tls Report an error

  “All of the data on our systems is encrypted via the newest TLS 1.3 security protocol”

• Penetration testing Report an error

  “We perform regular security penetration tests (RSPT) to stay ahead of the evolving cybersecurity threat landscape”

• Incident monitoring Report an error

  “We constantly monitor our systems to ensure the security and safety of our customer’s data. With a framework that follows all the latest incident reporting protocols”

• Secure development Report an error

  “following the Secure Development Life-cycle practices (SDL)”

• Backups Report an error

  “All of our customers' data is backed up multiple times per hour, not allowing for a loss of more than a few minutes of data in emergency situations.”

• SSO Report an error

  “Microsoft Azure SSO(Entra ID) is currently available as the preferred SSO choice.”

• Employee access Report an error

  “Spica and My Hours employees can access customers’ data solely for troubleshooting purposes. This access is restricted, logged, and monitored via secure VPN connections.”

• List on request Report an error

  “We handle our customers' data alongside a group of sub-processors. To get a complete list, contact us at support@myhours.com.”

• Personal data collected Report an error

  “Name and surname Email Contact details Client details Hourly rates Tracked time”

• Export options Report an error

  “The data is fully exportable through XLS or via API.”

• Retention after closure Report an error

  “We keep our customers’ data up to 90 days after account closure or less (upon request).”

• API availability Report an error

  “API Documentation”

Scores citing this record

• The Agency Owner European sovereignty
• The Field Supervisor Working-time law & audit record
• The Field Supervisor European sovereignty
• The Operations Lead Working-time law & audit record
• The Operations Lead European sovereignty
• The Payroll Officer Working-time law & audit record
• The Payroll Officer European sovereignty
• The Skeptic Working-time law & audit record
• The Skeptic European sovereignty
• The Works Council Advocate Working-time law & audit record
• The Works Council Advocate European sovereignty