Our commitment to enterprise-grade security.
We believe that security is at the heart of any best-in-class solution. It is no secret that security is an important decision criteria for every organization. That is how it should be. As holders of our customers’ most sensitive strategy and corporate data, having high security standards is fundamental.
Our commitment to keeping our customers’ data secure is not something where corners should be cut. That is why we back ourselves with vigorous security and privacy practices that help us protect and secure your business data. If you want to learn more, you’re in the right place.
FAQ
Our compliance and privacy policies and commitments are not developed just to be lengthy, fancy-looking documents, or for legal sakes. We have them, and follow them strictly, because we genuinely care about our customers, their data, results, and security. With Howwe Technologies you can rest assured your security is our top priority, so that you can put your focus where it should be: on achieving your goals. Learn the basics in this Q&A.
Where is data stored?
We use Google Cloud Platform with data centers in the EU (the Netherlands). Our database, login and the other vendors that store customer data are also in the EU. Every vendor, its location and its transfer safeguard is listed on our sub-processor page.
The few transfers outside the EU, such as notification emails, are protected by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
What does the legislation say?
The GDPR allows personal data to leave the EU only with adequate protection. Howwe keeps customer data in the EU and describes every transfer openly in our Privacy Policy and Data Processing Agreement.
What data is being stored?
All data and any services that hold PII (personally identifiable information) is stored in compliance with GDPR and any customer contracts. Stored data includes personal data of a non-sensitive nature:
- Name
- Goals and Key Activities
- Free text comments
Each employee has been trained in personal data handling and is expected to know how personal data is to be handled in the business. The company has also established routines for how personal data is to be protected and handled in the company’s IT systems. The routines include all types of processing and are reviewed and updated continuously.
Have you gone through a compliance or IT/IS audit?
Yes. An audit was carried out by The Legal, Financial and Administrative Services Agency (a framework agreement supplier to authorities such as the Swedish Enforcement Authority). We work with some of the largest banks and pharmaceutical companies in the world and have undertaken vigorous compliance processes to make sure we meet their high demands.
What log-in solution do you use?
- Single sign-on with Microsoft, Google or your own SAML identity provider
- Email and password
Do you have a dedicated resource and process for compliance and IT/IS?
Yes. We have an appointed person in the management team as well as an internal process for auditing and updating routines and documents, making us fully compatible with legislation at both national and EU level.
What is your uptime?
Over the last 12 months, Howwe has had an uptime of 99.99%.
Do you have routines for handling deviations or incidents affecting customers?
Yes. We have clear procedures and division of responsibilities if an incident were to occur.
Are you ISO certified?
Not yet, but we have implemented policies, routines, a technical safety framework and division of responsibilities that correspond to relevant ISO requirements. ISO certification is continuously evaluated.
More documentation
This Compliance Q&A provides a brief overview of our commitment to high security and privacy standards. These are important and complex subjects and we’re happy to tell you more. You’re also welcome to explore additional compliance documentation below.
Reach out to contact@howwe.io if you have additional questions for our Compliance Team.