Q. What PII does Workspot collect when using the Product?
A. The Product itself only requires processing user email or UPN (admin or end user) and connection data, which is as follows:
User Name, Email or UPN
Usage information: Resources opened/closed, period, frequency, log in error, timestamp of activity,
Client machine details: Device model (i.e. PC, iPhone X, Mac), machine name, OS version, Workspot client versions
Network details: Name of network - WiFi, broadband provider, IP address, location (GPS location if available)
Q. How long is PII stored by the Product?
A. This PII is retained for 365 days and then deleted automatically to ensure enforcement by technical means.
Q. Can administrators view the PII data within the Product? Can administrators export the PII data to a SIEM?
A. Yes. Administrators can view PII within the User page and the Events tab. Refer to section titled “Event Columns” in the following link: Workspot Control Event Logs.
Yes, Administrators can export the data to a SIEM such as Splunk.
Q. Is Workspot compliant with GDPR and Data Privacy Framework? Does an external assessor verify Workspot controls meet the requirements?
A. Yes, Workspot is compliant with GDPR and Data Privacy Framework (EU-US, Swiss-US and UK extension). Verify Workspot’s participation in the Data Privacy Framework here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt00000008SIjAAM&status=Active
An external GDPR auditor assesses Workspot annually to validate compliance with regulatory obligations for GDPR and Data Privacy Frameworks. Customers under NDA can view the GDPR assessment by requesting the Workspot Security Package from your Workspot team. You can find the report in the Workspot Security package (zip file) under folder Report - GDPR.
Q. Does Workspot offer a GDPR compliant Data Processing Agreement (DPA)?
A. Yes. Workspot offers a DPA with Standard Contractual Clauses (EU) 2021/914 as of 4 June 2021.
Q. Where does Workspot list its subprocessors?
A. Current list of subprocessors can be found in the DPA.
Please send any questions to [email protected].