Overview
The General Data Protection Regulation (GDPR) governs how the personal data of individuals in the European Union is collected, processed, and stored. Birdview PSA is committed to GDPR compliance and to protecting the privacy of our customers and their users.
Under the GDPR, Birdview PSA acts as a Processor of the data our customers store in the platform. Our customers act as the Controller of that data. For the data we collect directly from prospects and customers (such as account and billing information), Birdview PSA acts as the Controller.
How we comply
- EU data residency. Accounts for our European customers are hosted in Microsoft Azure data centers within the EU (Ireland). Customers can also choose hosting in the United States or Canada.
- Data Processing Agreement. We offer a DPA incorporating the EU Standard Contractual Clauses for customers who require one. Contact us to execute a DPA.
- Independently audited security. Logic Software Inc. (the company behind Birdview) is SOC 2 Type II certified. Our infrastructure provider, Microsoft Azure, maintains ISO 27001, ISO 27017, ISO 27018, SOC 1/2/3, PCI DSS, HIPAA, and FedRAMP attestations.
- Encryption. Data in transit is protected with TLS 1.2/1.3. Data at rest can be protected with 256-bit AES transparent database encryption, including backups and transaction logs.
- Sub-processor management. We maintain a public Sub-Processor List and review all sub-processors for GDPR compliance.
- Data subject rights. We support Controller obligations for access, rectification, erasure, restriction, and portability requests within the timeframes the GDPR requires.
- Breach notification. We will notify affected customers without undue delay after becoming aware of a personal data breach affecting their data.
- Retention and deletion. Customer data is deleted or anonymized following account termination in accordance with our retention policy.
FAQ
Where is my data hosted?
Birdview PSA runs on Microsoft Azure, with data centers in the United States, Canada, and the EU (Ireland). European customers’ accounts are hosted in the EU.
What personal data does Birdview store?
Creating a user profile requires a name and email address. Users and customers may add further personal data at their discretion; Birdview has no direct visibility into the content customers store in the platform.
Can personal data be removed from Birdview?
Yes. As a Processor, we verify removal requests with the Controller and delete or anonymize the data within the required timeframe. As a Controller of prospect and customer data, we honor removal requests directed to [email protected].
Do you sign Data Processing Agreements?
Yes, contact us at [email protected] to execute our DPA.
Where can I learn more about the GDPR?
See the official EU resource at gdpr.eu or the full regulation text.
Questions
For any questions about how Birdview PSA handles personal data, contact [email protected].
