Privacy policy — Scrive

Cited by

Facts read from this source

• Scrive ab entity Report an error

  “Scrive AB, org no 556816-6804, with registered address at Grev Turegatan 11A, 114 46 Stockholm, is responsible for the processing as described in this privacy notice”

• Scrive as entity Report an error

  “Scrive AS, with registered address at Mesh Youngstorget, Møllergata 6, 0179 Oslo, Norway is instead responsible for the processing of personal data”

• Qtsp status Report an error

  “Scrive AS (Norway), a fully owned subsidiary of Scrive AB, is a Qualified Trust Service Provider (“QTSP”) in the EU/EEA, as recognised according to the eIDAS Regulation.”

• Regions Report an error

  “Most of our sub-processors and locations for processing are within EU/EEA and all geolocations for our data hosting are within the EU/EEA.”

• Platforms Report an error

  “We offer our service on two different platforms (Scrive’s standard platform and Scrive EC), based on our customer’s individual needs and assessments. Scrive’s standard platform is hosted on AWS infrastructure and Scrive EC is hosted by an EU provider.”

• ISO 27001 datacenters Report an error

  “The data centers used by Scrive have appropriate levels of security and are certified with ISO-27001, amongst other standards.”

• Encryption Report an error

  “All documents are individually encrypted with keys stored in a different geographical site from the documents and the key storage itself is also encrypted.”

• Penetration testing Report an error

  “The security of the system as a whole is regularly tested by means of penetration tests performed by a third party.”

• DPA with service providers Report an error

  “Scrive enters into Data Processing Agreements (DPA) with all its service providers and conducts Data Protection Impact Assessment (DPIA) if the processing activity poses risk to the rights and freedoms of data subjects.”

• Dsr response time Report an error

  “The controller is obliged to respond to a DSR-request as soon as possible and no later than within 30 days.”

• Supervisory authorities Report an error

  “The Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) is the supervisory authority responsible for Scrive AB. The Norwegian Data Protection Authority (Datatilsynet) is the supervisory authority responsible for Scrive AS.”

• Esign description Report an error

  “Scrive eSign is a cloud-based software as a service solution (SaaS) for electronic signatures of documents.”

• Eid hub description Report an error

  “Scrive eID Hub is a cloud-based software as a service solution (SaaS) used for the main purposes of performing and/or enabling access to various methods for identification and authentication of a person’s identity, verification of a person’s details such as home address or age, and electronic and/or digital signatures.”

• Scts description Report an error

  “Scrive AS provides the Scrive Certified Trust Services (SCTS), which is an application that can be used to sign documents with advanced and qualified electronic signatures. The SCTS can be used in conjunction with Scrive eSign or other signature solutions.”

• Private free account Report an error

  “Scrive provides private account holders with cost-free accounts to let the private account holder try out Scrive eSign for free.”

• E archive Report an error

  “Scrive Users may initiate Scrive eSign workflows, receive invitations to take part in Scrive eSign workflows initiated by a third party, and retain their signed documents and templates in their e-archive within Scrive eSign.”

• Third party purposes Report an error

  “Scrive offers integrations to third-party systems, for the purposes of (i) importing documents to sign in Scrive eSign, (ii) exporting documents from Scrive eSign that have already been signed, and (iii) auto-populating documents with data from external sources.”

• Evidence package Report an error

  “Such information is necessary for the execution of the workflow, to identify/authenticate the individuals taking part in accordance with the methods as configured in the Scrive eSign service by the sender, and to enable Scrive to produce the evidence package (including a transaction log) that is attached to each document signed through Scrive eSign.”

• Esign user retention Report an error

  “We keep this data for the duration of our agreement with you/your employer and up to 30 days thereafter.”

• Marketing retention Report an error

  “We keep such information for eighteen months unless you before that time become a customer, qualify as an opportunity or subscribe to information of Scrive.”

• Recruitment retention Report an error

  “Scrive will process the information you provide to us for a job application, for recruitment purposes during the specific recruitment process and up to two years from the end of such recruitment process.”

• Inactive private account termination Report an error

  “Scrive reserves the right to terminate the account of an inactive private account holder. In case of such termination, Scrive will provide due pre-warning to the email registered in the account and enable the private account holder to offboard the contents or their account prior to final deletion thereof.”

• Eidas id providers example Report an error

  “The Scrive customer has asked Scrive to enable login with Swedish BankID, Norwegian BankID and Danish MitID.”

• Privacy by design Report an error

  “Scrive applies the principles of Privacy by design and Privacy by default in developing, maintaining and providing the Scrive eSign service, as well as in the handling of personal data for other purposes.”

• Internal security measures Report an error

  “2FA login, VPN, individual accounts, and activity logging are implemented as appropriate for employees with access to Scrive’s infrastructure and for employees with customer support tasks in the system.”

• Trust centre Report an error

  “You can find more information about our security measures at Scrive Trust Centre.”

Scores citing this record

• The Data Protection Officer eIDAS levels & trust services
• The Data Protection Officer Signer identification
• The Data Protection Officer Evidence, validation & retention
• The Data Protection Officer European sovereignty
• The Data Protection Officer Pricing transparency
• The Data Protection Officer eIDAS levels & trust services
• The Data Protection Officer Signer identification
• The Data Protection Officer Evidence, validation & retention
• The Data Protection Officer European sovereignty
• The HR Operations Lead eIDAS levels & trust services
• The HR Operations Lead Signer identification
• The HR Operations Lead Evidence, validation & retention
• The HR Operations Lead European sovereignty
• The HR Operations Lead eIDAS levels & trust services
• The HR Operations Lead Signer identification
• The HR Operations Lead Evidence, validation & retention
• The HR Operations Lead European sovereignty
• The Integration Engineer eIDAS levels & trust services
• The Integration Engineer Evidence, validation & retention
• The Integration Engineer European sovereignty
• The Integration Engineer eIDAS levels & trust services
• The Integration Engineer Signer identification
• The Integration Engineer Evidence, validation & retention
• The Integration Engineer European sovereignty
• The Legal Counsel eIDAS levels & trust services
• The Legal Counsel Evidence, validation & retention
• The Legal Counsel European sovereignty
• The Legal Counsel eIDAS levels & trust services
• The Legal Counsel Signer identification
• The Legal Counsel Evidence, validation & retention
• The Legal Counsel European sovereignty
• The Revenue Operations Lead eIDAS levels & trust services
• The Revenue Operations Lead Evidence, validation & retention
• The Revenue Operations Lead European sovereignty
• The Revenue Operations Lead eIDAS levels & trust services
• The Revenue Operations Lead Signer identification
• The Revenue Operations Lead Evidence, validation & retention
• The Revenue Operations Lead European sovereignty
• The Revenue Operations Lead Pricing transparency
• The Skeptic eIDAS levels & trust services
• The Skeptic Signer identification
• The Skeptic Evidence, validation & retention
• The Skeptic European sovereignty
• The Skeptic eIDAS levels & trust services
• The Skeptic Signer identification
• The Skeptic Evidence, validation & retention
• The Skeptic European sovereignty