Our role
For organisations using the Zendom platform, we act as a data processor. The organisation remains the data controller and decides how its people’s data is used. Our responsibilities are set out in a data processing agreement as part of our contract.
How we protect data
- Encryption of data in transit and at rest.
- Role-based access, so people see only the information relevant to their role.
- Anonymised reporting with minimum group sizes, so individual responses remain private.
- Access to client data restricted to authorised personnel.
- Regular review of our security practices.
Service providers
We use carefully selected service providers, such as hosting providers, to deliver our services. Each is bound by appropriate contractual safeguards. Details are available to clients on request.
Incidents
If a personal data breach affects client data, we will notify the organisation without undue delay and support it in meeting its own obligations.
End of service
At the end of an agreement, we return or securely delete client data in line with the organisation’s instructions and our legal obligations.
Further information
For more about how we handle personal information, please read our Privacy Policy.
For data protection enquiries, contact us at hello@zendom.work.