Security and GDPR

Data under control.
Privacy comes first.

Find out how Zencal protects data and read the documents setting out our responsibilities to you.

How we protect data Documents

Data protection

Clear principles for security.

We consider security and privacy when designing and developing Zencal.

Access and confidentiality

The Zencal team does not access your data without your consent, for example when you ask for technical support. Every Zencal employee has signed a confidentiality agreement.

Protective measures

We apply technical and organisational measures appropriate to the risk. Cloudflare delivers content and protects against DDoS attacks.

Your clients’ data

As the controller, you decide why and for how long your clients’ data is processed. When the service ends, we delete or return the entrusted data in accordance with your decision and the agreement.

Breach notification

We notify you by email of a breach affecting entrusted data without undue delay, and no later than 24 hours after the breach occurs.

Documents

Everything in one place.

Read about data processing and the terms of using Zencal.

Data processing agreement (DPA)Annex to the terms · Article 28 GDPR Subprocessor listOrganisations that support data processing Privacy policyInformation about our processing of personal data Terms and conditionsTerms of using Zencal Data security and adviceHow to keep your account secure

For organisations

Security in Enterprise.

For organisations with additional infrastructure and availability requirements.

Explore Zencal for organisations
  • Dedicated infrastructure
  • 99.9% SLA set out in the Enterprise agreement
  • Custom domain and dedicated account manager

FAQ

Frequently asked questions.

Do I need to sign a separate data processing agreement?

The data processing agreement is an annex to the terms and forms part of the service terms.

How will I learn about a new subprocessor?

We notify clients who have entered into a data processing agreement at least 14 days before engaging a new subprocessor.

Can I export my data?

Yes. Data can be imported and exported. We can help you plan a migration.

Can I carry out an audit?

You or an authorised auditor can carry out an audit, including an inspection, under the terms of the data processing agreement.

What if I plan to process special category data?

We can help review your intended process, the data involved and the agreements. Your organisation is responsible for the legal basis and appropriate use of special category data.

Contact

Have a security question?

Contact us about data protection or to report a vulnerability. If you find a security issue, please contact us before disclosing it.

hello@zencal.io