Security & Compliance

Teamful is built with security, privacy, and compliance as core principles. We design our systems to protect customer data, support regulatory requirements, and provide transparency into how information is handled across the platform.

 

This page outlines our approach to security and compliance for customers, partners, and stakeholders.

 

⸻

 

 

We operate on the principle that security is not a feature, but a foundation. Our platform is designed to protect data throughout its lifecycle, from creation and collaboration to storage and deletion.

 

Security controls are implemented at multiple layers, including infrastructure, application, and operational processes, and are continuously reviewed as the platform evolves.

 

⸻

 

 

Teamful processes personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

 

We act as a data processor for customer data and process personal data only on documented customer instructions, as set out in our Data Processing Addendum. Customers retain ownership and control of their data at all times.

 

Privacy principles such as data minimisation, purpose limitation, and access control are embedded into our product design and internal processes.

 

⸻

 

 

Access to customer data is restricted based on role and necessity.

 

We implement role-based access controls to ensure that only authorized personnel with a legitimate business need can access systems containing customer data. Administrative access is limited and logged.

 

User authentication mechanisms are designed to protect accounts and prevent unauthorized access. Customers control user permissions within their own workspaces.

 

⸻

 

 

Teamful is hosted on secure cloud infrastructure operated by reputable providers with industry-standard security practices.

 

Our infrastructure includes safeguards such as network isolation, firewalls, and monitoring systems designed to prevent unauthorized access and detect anomalous activity.

 

We rely on providers that maintain recognized security certifications and compliance standards appropriate for SaaS platforms.

 

⸻

 

 

Data is protected using encryption in transit and, where appropriate, at rest.

 

Secure communication protocols are used to protect data exchanged between users and the platform. Encryption practices are reviewed regularly to align with current security standards.

 

⸻

 

 

We monitor system activity to identify potential security incidents, misuse, or abnormal behavior.

 

Logs are maintained to support auditing, troubleshooting, and security investigations. Access to logs is restricted and monitored.

 

Teamful maintains incident response procedures designed to quickly assess, contain, and mitigate security incidents. In the event of a personal data breach affecting customer data, we notify affected customers without undue delay, in accordance with applicable law and contractual obligations.

 

⸻

 

 

Customer data is retained only for as long as necessary to provide the service and meet legal or contractual requirements.

 

Upon termination of a customer account, data is deleted or returned in accordance with our Data Processing Addendum, subject to reasonable backup retention periods and legal obligations.

 

⸻

 

 

We engage trusted sub-processors to support service delivery, such as infrastructure hosting, payment processing, and analytics.

 

All sub-processors are contractually required to implement appropriate security and data protection measures and to process data solely for the purpose of providing services to Teamful.

 

A list of sub-processors is available upon request.

 

⸻

 

 

Teamful aligns its security and data protection practices with widely recognized frameworks and principles, including:

• GDPR (EU General Data Protection Regulation)

• Privacy-by-design and privacy-by-default principles

• Industry-standard security controls for SaaS platforms

 

While we do not currently claim formal certification under frameworks such as ISO 27001 or SOC 2, our internal controls and practices are designed to support those standards.

 

⸻

 

 

Security is a shared responsibility. Customers are responsible for:

• Managing user access and permissions within their accounts

• Protecting account credentials

• Ensuring lawful use of the platform and uploaded data

 

We provide tools to support secure configuration, but customers control how the platform is used within their organizations.

 

⸻

 

 

We believe trust is built through clarity, not vague promises.

 

Customers with specific security, compliance, or procurement requirements are encouraged to contact us. We are happy to provide additional documentation, answer security questionnaires, and discuss our practices in more detail.

 

⸻

 

Contact

 

For security or compliance inquiries, please contact:

 

Teamful ApS

Copenhagen, Denmark

Email: security@teamful.io

or

privacy@teamful.io