Your data is in a safe place.

At Deskare, we take the security of your data seriously. Our security measures are state-of-the-art in terms of confidentiality and protection of your company's and its employees' data.

Your data is safe.

ISO 27001 and SOC 2 Type 1 certified

GDPR

GDPR compliant

Encryption in transit and at rest

Data hosted in France

Some general security practices.

GDPR Compliance

drop down

Deskare makes information security and data privacy fundamental principles in everything we do. We recognise the importance of complying with regulations to advance information security and data privacy for EU citizens.

Restricted authorisations

drop down

Our system of customisable roles and permissions allows administrators to define the right levels of authorisation for each person in Deskare.

SSO via OAuth2, SAML2, Okta...

drop down

Administrators can require users to authenticate with one click using their corporate email account via single sign-on. They will never need to set a password with us to log in to their account or sign up, even if they are creating a new account.

Permanent deletion of data

drop down

Administrators can delete data in Deskare if they have the appropriate access rights. When an employee leaves, their data is automatically anonymised, and can be permanently deleted at any time.

High availability and SLA > 99.9%

drop down

We guarantee high availability thanks to an Enterprise-level cloud infrastructure, automated and manual testing, regular performance benchmarking, production logging and alerting, and rapid continuous deployments without service interruption.

Deskare is ISO27001 and SOC 2 certified.

This means that your security team does not have to run all its checks on us: these certifications attest to the highest level of attention paid to data security and best development practices.

Save your teams time by choosing a solution that is already certified!

Visit our Trust Center

An infrastructure designed to support everything.

Secure infrastructure

Our cloud provider is AWS Europe, one of the most reliable and secure providers on the market. They guarantee the best firewall, intrusion and DMZ policies at the platform level.

Encryption of data in transit and at rest

drop down

Data is encrypted when it travels between us and the browser with Transport Level Security (TLS 1.3). It is also encrypted at rest (AES-256). All SSL certificates are issued and managed by AWS, and we enable HTTPS by default.

Penetration and intrusion testing

drop down

Each year, our entire infrastructure is tested by an independent third party during a penetration test (pen-tests).

Server patches

drop down

Our cloud platform is designed to protect customers from threats by applying security controls at every layer, from physical to application, by logically isolating customer applications and data, and through its ability to rapidly deploy security updates without service interruption.

Activity logs

drop down

We record all system activity and login behaviour with a 60-day retention policy.

A strict relationship with our suppliers and subcontractors.

Trusted data sub-processors

In accordance with the GDPR, we maintain a list of subsequent personal data sub-processors, as well as the methods and purposes of processing. Our DPO is directly accessible to our customers.

Strict selection of suppliers

drop down

We work with suppliers recognised for their seriousness and attention to data and flow protection.

Control of human risk.

Control of access levels and least privilege

An employee's access level is determined by their position. Logical access reviews are performed periodically, and access is immediately revoked if it is no longer necessary.

Confidentiality clause

drop down

All of our employees' and subcontractors' contracts include a confidentiality clause.

Encrypted daily redundancy and backups

drop down

We perform daily backups of our data, which are encrypted and then stored in data centres different from each other in order to allow restoration in the event of a critical incident and limit potential data loss.

Regular security training

drop down

The entire team is regularly trained in security best practices and made aware of the main types of existing vulnerabilities (OWASP Top 10...). Phishing awareness campaigns are conducted continuously.

Would you like to see Deskare in action?

Book a live demo with one of our experts: we'll get back to you during the day to present the tool and answer your questions.

Discover the solution live!

Deskare in the press

Become an expert in the Future of Work

Receive a summary of the latest news on the Future of Work in your mailbox! Once a month, guaranteed spam-free, unsubscribe possible at any time.

Thank you, your subscription has been successfully processed!

Oops! Something went wrong, please try again.