Data protection and security in SharePoint Forms

Privacy Policy

Please find general information about privacy protection in the Plumsail Forms Privacy Policy.

Application security

We take your safety seriously, so everything from design to deployment is done according to the highest security standards. Our source code repositories are regularly scanned for security issues and our network is protected by a firewall.

We have a QA department that reviews and tests our code for any security vulnerabilities. We perform testing in an environment separate from production. We do not use customer data during testing.

Also, we are using IDS technologies to monitor our network for malicious activity or policy violations.

Data security

Plumsail Forms collects very little information about customers - only SharePoint Online domain name (for SharePoint License) and Plumsail Account email are required for license validation.

After installing Plumsail Forms, application logs from the system is the only data we gather from you.

All the data submitted in SharePoint Forms, including attachments, is sent directly to SharePoint.

Business transactions

We protect your billing information. All transactions are processed through secure encryption, and sensitive data are transmitted, stored, and processed on the PCI DSS network.

Physical security

Plumsail Forms hosts all internal data in Microsoft Azure which data centers have been tested for security, availability, and business continuity. For more information, take a look at this link. A disaster recovery program ensures that our services will be available or are easily recoverable in the case of any catastrophe.

GDPR

Plumsail prioritizes customer trust. We know that customer data is important to our customers’ values and operations. That is why we keep it private and safe. This section describes our actions to comply with General Data Protection Regulation (“GDPR”), which becomes enforceable on May 25, 2018.

Information that we collect about you as a customer is described in our general privacy policy. You, as a customer, have rights and ability to:

• Access your personal data

• Correct errors in their personal data

• Erase your personal data

• Object to processing of your personal data

• Export personal data

Plumsail provides services for form submissions into MS Flow, only the attachments files are stored. The physical location of those services is inside the European Union. All data that we process is properly protected and encrypted as described in our Data security and privacy policies.

Plumsail is implementing necessary data breaches notifications for relevant supervisory authorities and data subjects in accordance with GDPR timeframes.

Compliance Certifications

Azure data center is certified for ISO 27001, SOC I, II AND III, HIPPA, and FedRAMP compliance. Visit Azure trust center.

Get in touch with us

If you have any questions about our security policy, please, feel free to drop a line at support@plumsail.com.