Security & GDPR
Your data stays on your systems.
We built Haven Teams for European data protection from the start. Here is exactly how we work, so your compliance team can check it.
Agreements
- Data processing agreement under GDPR Article 28; we act as your processor
- EU Standard Contractual Clauses for the transfer to India, with a written transfer impact assessment
- Non-disclosure agreement with your firm, and confidentiality agreements with every team member
Access
- Work happens in your EU systems through secure virtual desktops
- No local storage, downloads, USB drives or printing
- Multi-factor sign-in and named accounts; you grant and revoke access
- Access logs kept and reviewed
People
- Background checks before hiring
- GDPR and information-security training at onboarding and every year
- Clean-desk and no-phone rules on the work floor
Certification and insurance
- ISO 27001 certification in progress
- Professional indemnity and cyber insurance
- Incident response plan with notice to you within 24 hours of a suspected breach
Security pack
Everything your compliance team will ask for, in one document.
Template data processing agreement, summary of the Standard Contractual Clauses and transfer assessment, access-control description, list of approved AI tools and our incident process.
Try a dedicated team member for two weeks.
See the quality for yourself, on your own work, with no long-term commitment.