Freeday operates an ISO 27001-certified Information Security Management System (ISMS), ensuring that our services meet the highest standards of information security. As one of the leading ISO 27001-certified companies, our certification covers all aspects of the development and delivery of our services and is regularly audited by independent parties.
The ISO 27001 standard ensures that our risk management systems for information security at Freeday are effective and continuously improved. Key measures include:
- Data Encryption: Personal data is encrypted during transport and at rest,
following industry-standard best practices.
- Data Availability: Data is backed up in near real-time to geographically dispersed data centers, ensuring high availability.
- Access Control: Strict controls ensure data access is granted on a need-to-know basis, with role-based permissions and unique identities.
- Access Logging: Activities involving data are logged to track who accessed what data, when, and from where. These logs are tamper-proof.
- Independent Verification: Organizational security is verified through internal and external audits twice per year. Technical security is tested annually via independent penetration tests.
- Certified Cloud Providers: We utilize data centers operated by ISO 27001, 27017, and 27018-certified providers.We are committed to maintaining and improving our ISMS to protect the personal data entrusted to us. For more details about our certification or audits, contact us.
Freeday processes personal data on behalf of our customers in full compliance with the General Data Protection Regulation (GDPR Freeday). Our commitment includes:
- Processing data only as instructed by our customers.
- Ensuring confidentiality through strict access controls.
- Assisting customers in responding to data subject requests.
- Providing transparency in data breach notifications.
- We take GDPR compliance seriously, and information security at Freeday is a top priority, ensuring all personal data is handled with the utmost care.
Freeday collaborates with trusted subprocessors to deliver our SaaS services. We ensure that all subprocessors meet our stringent security and compliance standards. For data transfers outside the EEA, we adhere to GDPR-approved mechanisms such as Standard Contractual Clauses. If you would like to review the list of subprocessors, please contact us at info@freeday.ai.
To safeguard data, we implement industry-leading technical and organizational measures, including:
- Encryption of data at rest and in transit.
- Access controls based on roles and responsibilities.
- Regular security audits and penetration tests.
- A high-availability system with real-time backups.
At Freeday, we safeguard the security of your data by implementing the strictest security measures, including encryption of data both in transit and at rest.
We enforce strict access control measures, ensuring that data access is granted solely on a need-to-know basis. Our systems undergo regular testing and audits by independent parties to ensure compliance with the highest standards of information security at Freeday.
The privacy of your data is our top priority. We process personal data exclusively according to our customers' instructions, in full compliance with the General Data Protection Regulation (GDPR Freeday).
We ensure that all data is handled confidentially through strict access restrictions and provide complete transparency in the event of a data breach. Additionally, we assist customers in handling data subject requests and ensure a rigorous compliance process with privacy regulations.
Reach out to our security officer Karan. He is responsible for ensuring all your data remains secure and protected under our comprehensive security framework. Contact Karan with any questions about our security measures or compliance standards.