Retention, AI training & administration — found from sitemap — Fellow

Cited by

Facts read from this source

• SOC 2 type2 Report an error

  “Our latest SOC 2 Type II report covers the Security and Confidentiality criteria and is valid for 12 months. The report can be made available to current and prospective customers upon request, subject to a signed mutual non-disclosure agreement.”

• SOC 2 since Report an error

  “To affirm the effectiveness of our security posture, Fellow has been undergoing SOC 2 audits by an AICPA accredited third parties since 2020.”

• HIPAA baa Report an error

  “Fellow provides Business Associate Agreements (BAAs) for organizations that require compliance with the Health Insurance Portability and Accountability Act (HIPAA).”

• Phi protections Report an error

  “Fellow’s systems are designed with encryption, access controls, and audit logging to meet industry standards for safeguarding Protected Health Information (PHI).”

• GDPR Report an error

  “In addition to internal policies, personnel training, a Secure User Deletion protocol, and GDPR compliant data processing agreements, Fellow has an on staff Data Protection Officer.”

• CCPA Report an error

  “Fellow is committed to transparency and user privacy in accordance with the California Consumer Privacy Act (CCPA).”

• Pci stripe Report an error

  “Fellow collects payment information through Stripe. PCI compliance information for Stripe can be found here”

• Aws region Report an error

  “Fellow hosts its infrastructure on Amazon Web-Services (AWS) in the Canada Central region.”

• Aws certifications Report an error

  “AWS has a robust security infrastructure and has multiple security designations in place including SSAE16 and SOC2 certifications.”

• Backup retention Report an error

  “Fellow backs up all data on its system using AWS and maintains backups for a period of 30 days.”

• Encryption Report an error

  “Fellow encrypts all communications between its services including communication between our application and end users’ browsers (HTTPS). Furthermore, all data at rest is encrypted using AES 256-bit encryption.”

• SSO methods Report an error

  “Fellow recommends signing into its product through Google Single Sign-on (SSO) or Office365 Single Sign-on (SSO).”

• SSO other Report an error

  “Other supported Single Sign-on (SSO) methods include, Okta, OneLogin, and Custom OIDC”

• MFA Report an error

  “If you currently have Multi-factor authentication enabled through your Google or Office365 account, the same protection benefits will be shared when you use those credentials to log into Fellow.”

• Roles Report an error

  “Fellow allows for the designation of various roles within its product including administrator roles, manager-roles and individual-contributor roles.”

• Multi az Report an error

  “Fellow has the ability to use multiple availability zones within the AWS infrastructure in order to spin up new servers in multiple locations in the event of a failure in a particular zone.”

• Pen tests Report an error

  “Fellow commissions penetration tests from external security firms at least annually, ensuring that our software remains secure.”

• Vulnerability scans Report an error

  “Fellow undergoes 3rd party vulnerability scans daily, ensuring that no vulnerabilities exist in our systems.”

• Static code scans Report an error

  “Fellow uses static code analysis tools for our backend systems and APIs as part of our CI/CD pipeline”

• Incident response Report an error

  “Fellow has an incident response plan in place that is reviewed regularly.”

• Background checks Report an error

  “New employees at Fellow must undergo both criminal background checks and reference checks before beginning employment at the company.”

• Nda Report an error

  “All Fellow employees and service providers sign confidentiality and non-disclosure agreements”

• Support access logging Report an error

  “our customer support personnel will only access customer information for the purpose of troubleshooting upon asking for permission from said customers. Such access is logged and is monitored by internal security personnel.”

• Risk management Report an error

  “We ensure that a risk assessment is performed at least annually or when warranted based on changes that necessitate the activity.”

• Employee 2FA Report an error

  “enforce two-factor authentication on all critical infrastructure tools within the company”

• Rbac Report an error

  “Internal and production systems are controlled tightly via Role-based Access Controls (RBAC).”

• Trust centre Report an error

  “For more information on our security and privacy, check out our Trust Centre.”

• Status page Report an error

  “Server uptime monitoring (see status page)”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Management Consultant Retention, AI training & administration
• The Management Consultant European sovereignty
• The Data Protection Officer Retention, AI training & administration
• The Data Protection Officer European sovereignty
• The IT Lead Retention, AI training & administration
• The IT Lead European sovereignty
• The Sales Team Lead Retention, AI training & administration
• The Sales Team Lead European sovereignty
• The Skeptic Retention, AI training & administration
• The Skeptic European sovereignty
• The Works Council Chair Retention, AI training & administration
• The Works Council Chair European sovereignty