Security / trust page — Envoy Workplace

Cited by

Facts read from this source

• Encryption Report an error

  “All customer data is transferred securely using TLS v1.2 and above from the iPad app and Envoy dashboard to the cloud. All requests are routed through Cloudflare which acts as a firewall. At rest, data is encrypted including databases and object storage. Both AWS and Cloudflare use AES256 for disk encryption.”

• Infrastructure Report an error

  “Our IT infrastructure is 100% cloud-based.”

• Backups Report an error

  “Backups are taken every day and stored off-site. AWS oversees the physical security of these facilities and tightly controls who has access.”

• Retention Report an error

  “By default, Envoy stores visitors’ responses to your sign-in and purges employees’ responses to your Protect health check. Companies on Premium and Enterprise plans can choose to save or purge the responses to both their visitor sign-in and employee health check.”

• Deletion Report an error

  “We run periodic jobs to ensure all data, except for the screening result (approved or denied) is deleted within 24 hours on all of Envoy’s databases.”

• Purge on request Report an error

  “Any visitor and employee sign-in data that is saved to Envoy based on your retention settings can be purged upon explicit request.”

• Post termination retention Report an error

  “Envoy may retain data not related to sign-ins like account settings, user profiles, and location details, for up to 30 days after the termination of the contract.”

• Uptime Report an error

  “We understand the importance of reliability and aspire to a 99.9% uptime.”

• Status page Report an error

  “You can view our current uptime and product status by visiting status.envoy.com.”

• Offline mode Report an error

  “If devices become disconnected from a network connection, visitors can continue to sign in on the iPad, and their data will be stored locally on the device.”

• Bug bounty Report an error

  “We seek out and proactively address vulnerabilities and exposures in Envoy’s code and dependencies through automated tools, peer-review, penetration tests, and a public bug bounty program.”

• SOC 2 Report an error

  “Our security processes and controls are verified to meet SOC 2 Type II security standards.”

• Data selling Report an error

  “we will never sell your visitor or employee data, and we will not contact your visitors or employees without explicit permission.”

• Access management Report an error

  “Role-based administration allows customers to provide the right Envoy access to specified team members on global- or location-specific levels. And SAML can be utilized to integrate with your single sign-on identity provider to further regulate access.”

• GDPR Report an error

  “We have made significant efforts to ensure we are in compliance with the General Data Protection Regulation (GDPR) and to help our customers comply with GDPR contractual obligations. Data transfers from UK and EU customers are conducted under our Data Protection Agreement.”

• CCPA Report an error

  “Envoy complies with the CCPA (California Consumer Privacy Act), which became effective January 2020, and as amended by the CPRA. As currently defined in those regulations, Envoy will operate as a Service Provider to its customers.”

• Supported standards Report an error

  “EU General Data Protection Regulation (GDPR) Service Organization Controls (SOC) International Traffic in Arms Regulations (ITAR) FDA Food Safety Modernization Act (FSMA) Health Insurance Portability and Accountability Act (HIPAA) Payment Card Industry Data Security Standard (PCI DSS) Gramm-Leach-Billey Act (GLBA) Customs-Trade Partnership Against Terrorism (C-TPAT) Federal Information Security Modernization Act (FISMA)”

• Health check privacy Report an error

  “If you choose to ask questions about your employees’ or visitors’ health, you can choose to discard their responses and keep them private to those individuals.”

• Monitoring Report an error

  “We continually monitor uptime through third parties like Pingdom.”

• Dos protection Report an error

  “Envoy proactively protects against denial-of-service (DoS) attacks using CloudFlare’s advanced distributed DoS protection.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Microsoft 365 Administrator Occupancy analytics & employee privacy
• The Microsoft 365 Administrator Integrations, identity & administration
• The Microsoft 365 Administrator European sovereignty
• The Office Manager Occupancy analytics & employee privacy
• The Office Manager Integrations, identity & administration
• The Office Manager European sovereignty
• The People Lead Occupancy analytics & employee privacy
• The People Lead Integrations, identity & administration
• The Skeptic Occupancy analytics & employee privacy
• The Skeptic Integrations, identity & administration
• The Skeptic European sovereignty
• The Workplace Manager Occupancy analytics & employee privacy
• The Workplace Manager Integrations, identity & administration
• The Works Council Member Occupancy analytics & employee privacy
• The Works Council Member Integrations, identity & administration
• The Works Council Member European sovereignty