Encryption & access control — found from sitemap — Twist

Cited by

Facts read from this source

• GDPR compliant Report an error

  “Doist and our services, Todoist and Twist, are fully compliant with the GDPR as of May 25th, 2018.”

• Personal data collected Report an error

  “Email IP address Device ID Name and surname (optional, not processed) Job (optional, not processed) Phone number (optional, not processed) VAT ID (optional) Invoice address (for Unlimited accounts)”

• API export Report an error

  “We provide full access to data via our API which allows you to obtain the personal data that was provided to us and/or transfer it to another controller.”

• Data processor role Report an error

  “Doist is considered a Data Processor which means that Doist controls how your user data is processed and is responsible for the data to be processed within GDPR regulations.”

• Customer data rights Report an error

  “Although Doist owns the code, databases, and all rights to the Todoist and Twist applications, you retain all rights to your data.”

• Sales policy Report an error

  “No, we never sell data.”

• Deletion retention Report an error

  “Upon deleting your account, all your personal data will be removed from our production systems. Only an encrypted copy of your data will remain on our backup archives for 90 days. After this period, all data associated with your account will be deleted permanently.”

• DPA Report an error

  “Yes. We offer a DPA that has been pre-signed on behalf of Doist. It can be completed by filling out your details and signing it here.”

• Encryption at rest Report an error

  “When user data is stored in servers and databases, Doist uses AES 256 encryption.”

• Encryption in transit Report an error

  “When the data is being sent or received, it is encrypted with TLS 1.1 or above.”

• Backup encryption Report an error

  “Data backups on our server are encrypted with AES256 and signed by RSA with 2048 key length.”

• All data encrypted Report an error

  “We only collect as little data as possible, and all data is encrypted using AES 256 encryption.”

• Staff access restriction Report an error

  “We restrict staff access to personal data to a very small number of employees those who need access for specific reasons to improve Todoist and Twist.”

• Entity Report an error

  “© Doist Inc.”

• Vendors third party services Report an error

  “When it’s absolutely necessary, we use GDPR-compliant third party services and hosting partners such as Stripe, AWS and Google Workspace.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Compliance Counsel Encryption & access control
• The Compliance Counsel Retention, discovery & co-determination
• The Compliance Counsel Deployment & data custody
• The Compliance Counsel European sovereignty
• The Platform Engineer Encryption & access control
• The Platform Engineer Retention, discovery & co-determination
• The Platform Engineer Deployment & data custody
• The Platform Engineer Integrations & extensibility
• The Platform Engineer European sovereignty
• The Security Officer Encryption & access control
• The Security Officer Retention, discovery & co-determination
• The Security Officer Deployment & data custody
• The Security Officer Integrations & extensibility
• The Security Officer European sovereignty
• The Skeptic Encryption & access control
• The Skeptic Retention, discovery & co-determination
• The Skeptic Deployment & data custody
• The Skeptic European sovereignty
• The Team Lead Encryption & access control
• The Team Lead Retention, discovery & co-determination
• The Team Lead Deployment & data custody
• The Team Lead Integrations & extensibility
• The Team Lead European sovereignty
• The Works Council Advocate Encryption & access control
• The Works Council Advocate Retention, discovery & co-determination
• The Works Council Advocate Deployment & data custody
• The Works Council Advocate European sovereignty