Privacy policy — Culture Amp

Cited by

Facts read from this source

• Last updated Report an error

  “Last updated: 2 July, 2025”

• Entity Report an error

  “Culture Amp, Culture Amp Group, we, us or our means Culture Amp Pty Ltd (ACN 138 600 987) of Level 2, 29 Stewart Street, Melbourne VIC 3121, Australia, and any of its related bodies corporate”

• Children age Report an error

  “Unless permitted by applicable law, you must not permit any child under the age of 16 with access to our Services.”

• Collected types Report an error

  “Contact information: When you provide us with your contact information, whether through use of our Services, creation of an account, a form on our website, or an interaction with our sales or customer support team, we collect your contact information.”

• Sensitive info example Report an error

  “Sensitive information: In certain circumstances, you may be asked to provide us with sensitive information, such as COVID-19 vaccination status.”

• SSO Report an error

  “If you choose to register or login using a third party account (such as Google or your Company’s SSO provider), the authentication of your login details are handled by that third party and we only collect the information you expressly agree to share with us at the time you give permission to link your Culture Amp account with the third party account.”

• Hris import Report an error

  “If the Customer uses a third-party human resource information system (for example, Workday or BambooHR) to import information into Services, we will also receive information from that third party (for example, your name, email address, employment and demographic data).”

• Third party integrations Report an error

  “A Customer may elect to use a third party with the Services (for example Microsoft Teams). Culture Amp will not be responsible for any act or omission of any third party, including such third party’s use of Platform Data.”

• Controller role Report an error

  “For Administrators, Respondents and Individual Feedback Users, your company, which is our Customer will be the controller of your personal information and Culture Amp will be the processor. For Visitors, Culture Amp will generally be the controller of your personal information.”

• ISO 27001 Report an error

  “Culture Amp is ISO27001 certified.”

• Server locations Report an error

  “We have servers based in the United States, Europe and Australia. Your personal information will be hosted in the servers opted for by your Company.”

• Support data location Report an error

  “For example, if you contact our Customer Success team for support or questions, any information you provide us in the support request (including personal information such as your name and email address) will be processed and hosted in Ireland by the service provider we use to manage support requests.”

• EU scc Report an error

  “Culture Amp offers the European Union Standard Contractual Clauses (EU SCCs), also known as Model Clauses, to meet the adequacy and security requirements for our Customers that operate in the European Union, and other international transfers of information.”

• EU processing bases Report an error

  “with your consent; to fulfill our contractual responsibility to deliver the Services to the Customer; or to pursue Culture Amp’s legitimate interests of improving our Services or developing new products and features.”

• Deidentified processing Report an error

  “Culture Amp processes de-identified personal information for the purposes of activities including but not limited to benchmarking, text analytics, linkage analysis, attrition prediction, algorithm improvements and service development.”

• Pseudonym availability Report an error

  “If lawful and practicable, you may use a pseudonym (or simply not identify yourself) when dealing with us.”

• AI features Report an error

  “Culture Amp leverages AI techniques such as Natural Language Processing and Large Language Models (LLMs). These AI technologies either power standalone AI Products or features embedded within our platform – e.g. our Comment Summaries Feature which is accessible through the Engage product.”

• Llm infrastructure Report an error

  “Access to Bedrock or Vertex is via Culture Amp managed VPCs, proxied through an LLM proxy that provides additional controls including authentication and authorisation.”

• User rights Report an error

  “If you live in certain countries (for example, European Union member states) you may have rights regarding your personal information, including the right to access, correct, delete, port, limit or stop the use or disclosure of your personal information.”

• Export format Report an error

  “Data exports: If you request an export of the information that we hold about you, we will provide you with the data in a standard CSV format.”

• Platform data rights channel Report an error

  “If you would like to request access, correction, transfer or deletion of your Platform Data, you must contact your Company.”

• Retention backups Report an error

  “We retain your personal information for as long as we provide our Services to the Customer and until the Customer requests us to delete your personal information, or as needed to comply with our legal obligations, resolve disputes or enforce our legal rights. We may keep your personal information in our encrypted and archived backups for up to 90 days from the point of collection.”

• Lead supervisory authority Report an error

  “please contact the relevant EU Data Protection Authority in your country or the UK Information Commissioner (our lead supervisory authority)”

• Privacy contacts Report an error

  “If you suspect there has been any unauthorized access or misuse of your personal information, immediately contact our Data Protection Officer at privacy@cultureamp.com. If you have any concerns about the security of our platform, contact our Information Security Team at security@cultureamp.com.”

• Sensitive data consent Report an error

  “If you send or disclose any sensitive personal information (e.g. information related to racial or ethnic origin, sex life or physical or mental health condition) to us when using the Services, you consent to our processing and use of such sensitive personal data as necessary to provide the Services.”

• Cookie management Report an error

  “You can manage your cookie preferences via the cookie preferences manager.”

• Mobile app collection Report an error

  “You can stop all collection of information by the Culture Amp Mobile Application by uninstalling it.”

• Individual feedback visibility Report an error

  “However, Continuous Feedback Messages will only be viewable by you and the person you are sharing Continuous Feedback Messages with.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Head of HR Works council, visibility & AI disclosure
• The Head of HR HRIS sync, integrations & data portability
• The Head of HR European sovereignty
• The Head of HR Works council, visibility & AI disclosure
• The Head of HR HRIS sync, integrations & data portability
• The Head of HR European sovereignty
• The HR IT Integrator Goals, OKRs & continuous feedback
• The HR IT Integrator Works council, visibility & AI disclosure
• The HR IT Integrator HRIS sync, integrations & data portability
• The HR IT Integrator European sovereignty
• The HR IT Integrator Works council, visibility & AI disclosure
• The HR IT Integrator European sovereignty
• The People Analyst Works council, visibility & AI disclosure
• The People Analyst HRIS sync, integrations & data portability
• The People Analyst European sovereignty
• The People Analyst Works council, visibility & AI disclosure
• The People Analyst HRIS sync, integrations & data portability
• The People Analyst European sovereignty
• The Skeptic Works council, visibility & AI disclosure
• The Skeptic HRIS sync, integrations & data portability
• The Skeptic European sovereignty
• The Skeptic Works council, visibility & AI disclosure
• The Skeptic HRIS sync, integrations & data portability
• The Skeptic European sovereignty
• The Managing Director Goals, OKRs & continuous feedback
• The Managing Director Works council, visibility & AI disclosure
• The Managing Director HRIS sync, integrations & data portability
• The Managing Director European sovereignty
• The Managing Director Goals, OKRs & continuous feedback
• The Managing Director Works council, visibility & AI disclosure
• The Managing Director HRIS sync, integrations & data portability
• The Managing Director European sovereignty
• The Works Council Member Works council, visibility & AI disclosure
• The Works Council Member HRIS sync, integrations & data portability
• The Works Council Member European sovereignty
• The Works Council Member Goals, OKRs & continuous feedback
• The Works Council Member Works council, visibility & AI disclosure
• The Works Council Member European sovereignty