Compliance & Legal

The boxes you need to tick.

For HR and security teams evaluating 360review, here’s what you need to know, in four documents.

GDPR Compliant

How we collect, store, and protect personal data. Customer data stays in the EEA; respondents stay anonymous by design.

Read our privacy policy

DPA Available

Our Data Processing Agreement under GDPR Article 28, with EU Standard Contractual Clauses incorporated. Available for review and signing.

Review the DPA

EU Data Residency

All primary customer data is stored within the European Economic Area. Each sub-processor we use is bound by GDPR-compliant terms.

See our sub-processors

Clear Commercial Terms

Our commercial terms: one-time purchases, no auto-renewal, your data stays yours, anonymous respondents, customer data in the European Economic Area.

Read the Terms of Service

Questions about compliance? Contact us.