Trust Center
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Trust Center Updates
Subprocessor update
Update to subprocessor: Google cloud
In accordance with our obligations under Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the ”GDPR”), we hereby inform you of a change to the involvement of a subprocessor that already forms part of the provision of our software solution.
Overview
Effective thirty (30) days after this notification, Shiftbase B.V. will update the involvement of the following existing subprocessor as set out below.
| Company name | Head Office | Updated purpose | Data Location |
|---|---|---|---|
| Google Ireland Limited | Gordon House, Barrow Street, Dublin 4 | Hosting & Infrastructure; AI-based processing via Google Vertex AI (EU) for schedule parsing and in-product AI features. | EU |
What is changing: Google Cloud, already engaged for hosting and infrastructure and for AI-based schedule parsing during signup via Google Vertex AI (EU), will additionally be involved for in-product AI features. The subprocessor, contracting entity and data location (Google Vertex AI, EU region) remain unchanged; the scope of processing expands from prospect data submitted at signup to customer data processed under existing data processing agreements.
The complete list of subprocessors involved by Shiftbase B.V. is also available at the following address: https://trust.shiftbase.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57
Objection
If you object to this change to Google Cloud for reasons related to data protection, please send an email to privacy@shiftbase.com with the subject "Subprocessor Objection", including the ground(s) for the objection. We remind you that, unless a longer period is agreed between us in the data processing agreement applicable between our companies, you have a period of thirty (30) days following this notification to submit your objections. If no objections are received within set period, we will assume you consent to the change.
Mixpanel
New subprocessor: Mixpanel
In accordance with our obligations under Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the ” GDPR”), we hereby inform you that we intend to involve new subprocessor(s) in the provision of our software solution.
Overview
Effective thirty (30) days after this notification, Shiftbase B.V. will start involving the following additional subprocessor(s) for delivering it's services.
| Company name | Head Office | Purpose | Data Location |
|---|---|---|---|
| Mixpanel | San Francisco, CA, Verenigde Staten | Analytics | EU |
The complete list of subprocessors involved by Shiftbase B.V. is also available at the following address: https://trust.shiftbase.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57
Objection
If you object to Shiftbase B.V. contracting Mixpanel as a new subprocessor for reasons related to data protection, please send an email to privacy@shiftbase.com with the subject "Subprocessor Objection", including the ground(s) for the objection. We remind you that, unless a longer period is agreed between us in the data processing agreement applicable between our companies, you have a period of fourteen (14) days following this notification to submit your objections. If no objections are received within set period, we will assume you consent to the involvement of Mixpanel.
GetStream
New subprocessor: GetStream
In accordance with our obligations under Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the ” GDPR”), we hereby inform you that we intend to involve new subprocessor(s) in the provision of our software solution.
Overview
Effective thirty (30) days after this notification, Shiftbase B.V. will start involving the following additional subprocessor(s) for delivering it's services.
| Company name | Head Office | Purpose | Data Location |
|---|---|---|---|
| GetStream | Keizersgracht 205-3, 1016 DS Amsterdam, Nederland | Providing in-app chat and messaging infrastructure for real-time communication between users within the application. | EU |
The complete list of subprocessors involved by Shiftbase B.V. is also available at the following address: https://trust.shiftbase.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57
Objection
If you object to Shiftbase B.V. contracting GetStream as a new subprocessor for reasons related to data protection, please send an email to privacy@shiftbase.com with the subject "Subprocessor Objection", including the ground(s) for the objection. We remind you that, unless a longer period is agreed between us in the data processing agreement applicable between our companies, you have a period of fourteen (14) days following this notification to submit your objections. If no objections are received within set period, we will assume you consent to the involvement of GetStream.
Hotjar
New subprocessor: Hotjar
In accordance with our obligations under Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the ” GDPR”), we hereby inform you that we intend to involve new subprocessor(s) in the provision of our software solution.
Overview
Effective thirty (30) days after this notification, Shiftbase B.V. will start involving the following additional subprocessor(s) for delivering it's services.
| Company name | Head Office | Purpose | Data Location |
|---|---|---|---|
| Hotjar | Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta | Hotjar – Usage Analytics and UX Optimization | EU |
The complete list of subprocessors involved by Shiftbase B.V. is also available at the following address: https://trust.shiftbase.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57
Objection
If you object to Shiftbase B.V. contracting Hotjar as a new subprocessor for reasons related to data protection, please send an email to privacy@shiftbase.com with the subject "Subprocessor Objection", including the ground(s) for the objection. We remind you that, unless a longer period is agreed between us in the data processing agreement applicable between our companies, you have a period of fourteen (14) days following this notification to submit your objections. If no objections are received within set period, we will assume you consent to the involvement of Hotjar.
New subprocessor
New subprocessor: Customer.io
In accordance with our obligations under Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (the ” GDPR”), we hereby inform you that we intend to involve new subprocessor(s) in the provision of our software solution.
Overview
Effective thirty (30) days after this notification, Shiftbase B.V. will start involving the following additional subprocessor(s) for delivering it's services.
| Company name | Head Office | Purpose | Data Location |
|---|---|---|---|
| Peaberry Software Inc. d/b/a Customer.io | 9450 SW Gemini Dr., Suite 43920, Beaverton, Oregon 97008-7105. | Product marketing & Transactional email | EU |
The complete list of subprocessors involved by Shiftbase B.V. is also available at the following address: https://trust.shiftbase.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57
Objection
If you object to Shiftbase B.V. contracting Customer.io as a new subprocessor for reasons related to data protection, please send an email to privacy@shiftbase.com with the subject "Subprocessor Objection", including the ground(s) for the objection. We remind you that, unless a longer period is agreed between us in the data processing agreement applicable between our companies, you have a period of fourteen (14) days following this notification to submit your objections. If no objections are received within set period, we will assume you consent to the involvement of Customer.io.