Privacy policy — Bitwarden

Cited by

Facts read from this source

• Dpf certification Report an error

  “Bitwarden Inc. ("Bitwarden") complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”)”

• Encryption standard Report an error

  “Your data, including Personal Information, is never sent to the Bitwarden cloud servers without first being encrypted on your local device using AES 256 bit encryption. In addition, Bitwarden encrypts the transmission of that information using secure socket layer technology (SSL).”

• Storage regions Report an error

  “Bitwarden and our subprocessors and vendors primarily store information collected from you within the European Economic Area and the United States.”

• Transfer mechanisms Report an error

  “We use applicable, approved information transfer mechanisms where required, such as EU Standard Contractual Clauses (SCCs), or the Data Privacy Framework.”

• Ftc enforcement Report an error

  “Bitwarden is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).”

• Retention policy Report an error

  “We retain Administrative Data for as long as you are a customer of Bitwarden and as required by law. If you terminate your relationship with Bitwarden, we will delete your Personal Information in accordance with our data retention policies.”

• Rights access correct delete Report an error

  “We enable you to access, correct, and delete your account with the Bitwarden Service at any time.”

• Self hosting Report an error

  “If we host the Bitwarden Service for you, we will host Vault Data.”

• California no sale Report an error

  “We do not "sell" your Personal Information as we understand that term to be defined by the California Consumer Privacy Act and its implementing regulations.”

• Minimum age Report an error

  “The Site or Bitwarden Service is not directed to, nor intended to be used by, individuals under the age of 13, or the equivalent minimum age in the relevant jurisdiction.”

• Entity address Report an error

  “Address: 1 North Calle Cesar Chavez, Suite 102, Santa Barbara, CA 93103”

• DPA with subprocessors Report an error

  “To ensure the confidentiality and security of your Personal Information, we have data processing terms in place with service providers that handle Personal Information.”

• Policy last revised Report an error

  “Last revised APRIL-2024”

• Community forum account Report an error

  “You must have a separate account to use the Community Forum.”

• Cookie categories Report an error

  “We use two main categories of cookies: 'Strictly Necessary' and 'Functional' cookies.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The CISO European sovereignty
• The CISO Hosting choice, offline access & export
• The CISO European sovereignty
• The Compliance Auditor Hosting choice, offline access & export
• The Compliance Auditor European sovereignty
• The Compliance Auditor European sovereignty
• The DevOps Engineer European sovereignty
• The DevOps Engineer European sovereignty
• The Identity Engineer European sovereignty
• The Identity Engineer Hosting choice, offline access & export
• The Identity Engineer European sovereignty
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The SME Owner European sovereignty
• The SME Owner Hosting choice, offline access & export
• The SME Owner European sovereignty