Privacy and Security at DataGroomr

Before any ISV application can be publicly listed on Salesforce AppExchange, it must pass a security review, which includes how well it protects customer data. To help identify security vulnerabilities, Salesforce security review teams test our applications with threat-modeling profiles based on common web vulnerabilities. The teams attempt to penetrate our defenses with the goal of extracting or modifying data that they don’t have permission to access, just as security threats attempt to do. 

A voluntary compliance standard for technology companies with cloud-based products, SOC 2 specifies how an organization should manage customer data. The AICPA (American Institute of Certified Public Accountants) sets compliance guidelines which ensure services are secure, available, and confidential and that information security best practices are in place. 

DataGroomr has taken information security and compliance very seriously and built our solution around being SOC 2 compliance from the start. Our SOC 2 Type 2 report is simply official proof that we comply with the globally recognized information security standard, which recognizes concrete data protection practices and ensures that your data remains protected throughout its lifecycle within our platform. 

HIPAA, the Health Insurance Portability and Accountability Act, sets national standards for safeguarding patient health information, particularly in electronic healthcare transactions. It mandates stringent confidentiality and security measures, ensuring the responsible use and disclosure of health information while granting patients access and correction rights to their health records.  

DataGroomr’s HIPAA certification not only aligns with regulatory standards but also reinforces our commitment to maintaining the highest data security and privacy standards. Customers needing or opting for the use of protected health information (PHI) within their DataGroomr instance can rest assured that they are using a secure and reliable solution. 

DataGroomr is committed to protecting the privacy and rights of individuals whose personal data is processed within our application. To ensure that DataGroomr adheres to the requirements set forth in the General Data Protection Regulation (GDPR), we’ve implemented key measures and processes including: