General Data Protection Regulation (GDPR)

GDPR is an opportunity to build a stronger data protection foundation for the benefit of all. Coconut Software is committed to ensuring that our platform is GDPR-compliant.

Visit Our Privacy & Security Page

What We’re Doing about GPDR Compliance

Our Team

GDPR compliance is the responsibility of the IT Leadership Team which is comprised of senior members of the Security/Privacy, Development, DevOps teams as well as the CTO.

Privacy & Security

Our Policy

Our Privacy Notice and Terms of Use were updated to align with the requirements of the GDPR. We’ve also created a Data Processing Addendum for our Terms of Service.

Data Protection

Every new feature, or enhancement, is developed based on the principles of Privacy by Design per Article 25 of the GDPR. All data, regardless of origin, is protected according to the standards of the GDPR.

Privacy & Security

Providing Data Protection at Every Level

All staff have signed a Confidentiality Agreement stating that they understand their obligations under our Privacy Policy, PIPEDA, and the GDPR.

We have designated a Privacy Officer who is responsible for all Privacy and GDPR related inquiries.

We have established a process to honor an individual’s “Right To Be Forgotten”, even if they don’t live in the EU.

We Are SOC 2 Type 2 Certified (August 2023)

Amazon Web Services (AWS)

Amazon Web Services infrastructure puts strong safeguards in place to help protect customer privacy. All data is stored in highly secure AWS data centers. For a detailed overview of all security and privacy measures, see the AWS Cloud Security page. For a list of current security accreditations, see the AWS Compliance Programs page.

All data is encrypted in transit and at rest.

Blogs, Books & Guides