Security, privacy and procurement in one place.
Everything below links to the detail. We state what is in progress next to what is done.
Tenant isolation
Every tenant-scoped table uses PostgreSQL row-level security, so a bug in application code cannot return one company's rows to another.
Read the detailsWhere data lives
The primary database, which holds employee profile and org data, is hosted in Frankfurt, Germany. Application servers run in Ohio, USA.
See hostingAuthentication
Google and Microsoft sign-in, email and password with an optional second factor, and SCIM provisioning on Scale and Enterprise.
See authenticationIncident response
A written plan with severity levels, containment first, and customer notification targets.
Read the plan summaryPrivacy and your data
Any teammate can export their own data or request deletion. Every video can be reported or blocked.
Privacy policyRequest documents
We share the DPA, information security policy, incident response plan, business continuity plan, data retention policy, access review policy and architecture diagrams by email, and can complete your own questionnaire.