GDPR
Personal data, privacy, and how to ask about terms
How we handle personal data
Our Privacy Policy explains how we handle personal data. Contact us with questions about data processing terms or where your data is stored.
Overview
The GDPR governs how the personal data of people in the EU is processed. It applies to you as the controller of your users' data, and to vendors that process it for you.
You choose the cloud provider and region for infrastructure you provision through VxCloud. Contact us if you need a data processing agreement or need to confirm where platform data is stored. The controls below are in the product today.
What's included
Production-grade capabilities, ready to enable in your workspace.
Multi-factor authentication
Accounts can require a time-based one-time code at sign-in.
OAuth sign-in
Sign in with an existing identity provider account instead of another password.
Secrets in HashiCorp Vault
Credentials are kept in Vault rather than in application configuration.
Audit console
Activity is recorded so it can be reviewed later, behind an MFA check.
Encryption in transit
Public VxCloud endpoints are served over HTTPS.
Card data stays with providers
Card numbers for VxCloud billing are handled by Stripe and PayPal, not stored by us.
Frequently asked questions
Still have questions? Our enterprise team answers within one business day.
Contact us with what you need and we'll tell you what we can offer.
Related enterprise capabilities
Ready to move forward with GDPR?
Talk to our enterprise team — we'll scope your requirements, map the right capabilities, and build a rollout plan tailored to your organization.