Security & Compliance
Your Security is Our Top Priority
GDPR Compliant
The GDPR (General Data Protection Regulation) is a regulation designed to strengthen data protection for residents of the European Economic Area which includes the EU, Iceland, Lichtenstein, and Norway. SocketLabs offers a GDPR compliant Data Processing Addendum to our customers.
Privacy Shield Certified
Privacy Shield is a self-certification program that enables organizations to lawfully transfer personal data from the EU and Switzerland, to the United States in support of transatlantic commerce.
VeraSafe Verified
To qualify for this certification, SocketLabs’ online privacy policy must address the critical areas of 3rd party disclosure, private information security and email choice.
M3AAWG Member
The Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) is where the industry comes together to work against bots, malware, spam, viruses, DoS attacks and other online exploitation. SocketLabs has been a member of M3AAWG in an ongoing effort to ensure the privacy and security of our email platform.
CCPA Compliant
The California Consumer Privacy Act is a state law that gives California residents more control over the personal data that is collected on them. At a high level the CCPA gives California consumers the right to access, delete, and opt-out of the personal data collection.
General Privacy Policy
We care about your privacy and trust in SocketLabs. If you want to learn about SocketLabs’ privacy, read our Privacy Policy to inform you of our practices involving data collection, use, and disclosures.
Email Service Privacy Policy
We care about your privacy and trust in SocketLabs. If you want to learn about SocketLabs’ privacy as it relates specifically to our email service, read our Email Service Privacy Policy to learn more about our practices involving data collection, use, and disclosures.
Committed to Keeping Your Data Safe and Secure
SocketLabs’ Internal Security Policy
-
- Purge, delete, or destroy data in electronic or paper form after it is no longer needed.
- Conduct privacy and security training for all employees.
- Periodically perform risks assessments for all information systems.
- Inventory, classify, and manage information systems throughout their lifecycle.
- Grant privileges according to job responsibilities that are based on the principle of least privilege.
- Ensure that third-party service providers have adequate security and privacy agreements.
- Secure, segment, and restrict network traffic using firewalls
-
- Use a change management process before carrying out any major information system change.
- Patch and update information systems to protect them against vulnerabilities.
- Ensure that third-party service providers have adequate security and privacy agreements.
- Perform background checks for all employees.
- Use physical security controls to limit access to information systems to authorized personnel.
- Use endpoint security solutions on information systems to help protect them against virus and malware attacks.
- Maintain backup copies of critical information systems to avoid the loss of data.
Don't just take our word for it...
