Security & Compliance
Security
SOC 2
Infrastructure
Data Protection
European Union General Data Protection Regulation (GDPR)
Since May 25th, 2018, the GDPR has increased regulation and use of European citizens' data, increasing the privacy and security of personal information. Raffle was founded in mid-2018, which is why Raffle has been fully compliant with GDPR among other standard privacy regulations from the very beginning and has never compromised. Raffle will make sure to safely guide you through what is needed. When relevant to the services Raffle provides, we enter into a Data Processing Agreement (DPA, to protect both parties) performed by leading European Law firm Kromann Reumert (the winner of the prize: Europe's best law firm, three years in a row).
US HIPAA legislation
The United States of America Health Insurance Portability and Accountability Act of 1996 protects sensitive patient healthcare information from being disclosed without approval or knowledge of the patient. Since Raffle was founded in mid-2018 we have been dedicated to security and compliance without compromise. We are committed to being transparent and protecting our customers if there is any health data in the sources that raffle is searching.
Location of Data
For our customers in the EU the location of our Azure Data Center is West Europe (Netherlands) and data will never leave the EU. In a disaster recovery situation, our systems are guaranteed to be started up in another EU-based data center. Furthermore, we have Customer Lockbox enabled on our Azure subscription, which ensures that Microsoft cannot access content to do service operations without our explicit approval.
For our customers in the US the location of our Azure Data Center is in the US (New York). In a disaster recovery situation, our systems are being started up in the US or in an EU-based data center. Furthermore, we have Customer Lockbox enabled on our Azure subscription, which ensures that Microsoft cannot access content to do service operations without our explicit approval.
Access Management
With data security comes data access, and such access can be managed in the Raffle back end by authorized users in your company. Access management lets you control who sees what data in Raffle-generated search results, so different people will see different answers and/or linked data sources (e.g. documents within an intranet) according to their security/permission profiles; even if their search queries may be identical in phrasing. This security feature is highly relevant for Workplace Search.
Does Raffle for Public Data need a DPA?
Therefore we do not need a DPA when it comes to website search.
Generally on data
Data storage
Data in transit
Data at rest
Development practices
Risk Assessment Process
Business processes
Data protection
Raffle's objectives
Raffle's customers
Money
Security Policies
- Acceptable Use Policy
- Asset Management Policy
- Backup Policy
- Business Continuity Plan
- Code of Conduct
- Data Classification Policy
- Data Deletion Policy
- Data Protection Policy
- Disaster Recovery Plan
- Encryption Policy
- Incident Response Plan
- Information Security Policy
- Password Policy
- Physical Security Policy
- Responsible Disclosure Policy
- Risk Assessment Policy
- Software Development Life Cycle Policy
- System Access Control Policy
- Vendor Management Policy
- Vulnerability Management Policy
