Use Plumsail Trust Center to learn about our security posture and request access to our security documentation.
General information about privacy protection can be found in the Plumsail HelpDesk Privacy Policy.
Plumsail HelpDesk is hosted in Microsoft Azure. The infrastructure for databases and application servers is managed and maintained by Azure.
We are seriously concerned about your security, so, everything from engineering to deployment performed with our highest standards of security. Our source code repositories are regularly scanned for security issues and our network is protected by a firewall.
We have a QA department which reviews and test our code for any security vulnerabilities. Testing is occurred in a separate environment from production. We don’t use any customer’s data during testing.
Also, we are using IDS technologies to monitor our network for malicious activity or policy violations.
Plumsail HelpDesk collects very few information about customers - only SharePoint Online domain name and URLs of HelpDesk installations are required for license validation. After installing Plumsail HelpDesk, the only data that we are gathering from you is application logs from the system.
Whenever your data is in transit between you and us, everything is encrypted and sent using HTTPS. Data at rest is encrypted using AES 256 bit standards (one of the strongest block ciphers available) with keys managed by Azure Storage Service Encryption. Data in transit is encrypted with SSL/TLS protocols.
In HelpDesk we use a multi-tenant data model, so each user has a unique tenant ID and only logged-in and verified users can have an access to the application.
Access to data of your help desk governed by access rights and can be configured to different permission levels.
All that data is stored in Microsoft Azure. Backups are taken every day. Application logs are stored for a week.
We protect your billing information. All transactions are processed through secure encryption and sensitive data are transmitted, stored and processed on PCI DSS network.
Plumsail HelpDesk hosts all data in Microsoft Azure which data centers have been tested for security, availability and business continuity. For more information, take a look at this link. Disaster recovery program ensures that our services will be available or are easily recoverable in the case of any catastrophe.
Plumsail prioritizes customer trust. We know that customer data is important to our customers’ values and operations. That is why we keep it private and safe. This section describes our actions to comply with General Data Protection Regulation (“GDPR”).
Information that we collect about you as a customer is described in our general privacy policy. You, as a customer, have rights and ability to:
Access your personal data
Correct errors in their personal data
Erase your personal data
Object to processing of your personal data
Export personal data
Plumsail HelpDesk is installed directly into SharePoint tenant of a client. All personal data of HelpDesk requesters and agents are stored inside tenant of a client. Thus, Microsoft GDPR policies are applied here.
However, Plumsail provides services for conversion of email messages into tickets. The physical location of those services is inside the European Union. All data that we process is properly protected and encrypted as described in our data protection and in privacy policies.
Plumsail is implementing necessary data breaches notifications for relevant supervisory authorities and data subjects in accordance with GDPR timeframes.
Review the Data Processing Agreement. The Data Processing Agreement is a part of the Master Service Agreement.
Azure data center is certified for ISO 27001, SOC I, II AND III, HIPAA and FedRAMP compliance. Visit Azure trust center.
If you have any questions about our security policy, please, feel free to drop a line at support@plumsail.com.