GDPR Commitment

Our Commitment Statement to You and the Protection of Your Data

At Deskpro, we are dedicated to assisting our customers and users in understanding and, where applicable, complying with the General Data Protection Regulation (GDPR). The GDPR is a comprehensive EU data privacy law that came into effect on 25 May 2018, strengthening and standardizing user data privacy across EU member states. It introduces new or additional obligations on all organizations that handle personal data of individuals in the EU/EEA and the UK, regardless of where the organizations are located. Here, we outline how Deskpro supports customers with the EU GDPR and the UK GDPR.

How Deskpro Supports GDPR Compliance

The GDPR's updated requirements are significant, and our global team has adapted Deskpro's product offerings, operations, and contractual commitments to help our customers comply with the regulation. As a processor for most customer data, Deskpro has implemented the following measures to support your compliance:

• Maintaining independently assessed security controls and certifications such as ISO27001 and SOC 2 Type II.
• Updated contractual terms, including a GDPR-aligned Data Processing Addendum (DPA) with Technical and Organizational Measures.
• International data transfer support via the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement/Addendum (as applicable), incorporated into our DPA.
• Regional data hosting available across all plans, with hosting options in EU,UK and US. Note: Enterprise plan allows customers to choose from locations across 6 continents.
• Deployment options for hosting your help desk software with us on Deskpro Cloud, or self-hosted/managed with Deskpro On-Premise.

Our Security Infrastructure Standards and Certifications

Protecting our customers’ information and their users’ privacy is extremely important to us. As a cloud-based company entrusted with some of our customers’ most valuable data, we have set high standards for security. Deskpro maintains independent security attestations and certifications, including internationally recognized security certification ISO 27001 and SOC 2 Type II (audited against the AICPA Trust Services Criteria by an independent assessor).

Deskpro maintains a dedicated Information Security team experienced in building and maintaining enterprise-level security programs. We meet contractual and legal obligations for security incident detection and notification, including GDPR/UK GDPR breach notification requirements where applicable.

If you would like to learn more about Deskpro's security policies and procedures, please visit our security page. It provides detailed information on our approach to security, including a white paper on how Deskpro ensures user data security, technical and organizational measures (TOMs), and encryption standards.

International Data Transfers

To comply with European Union data protection laws regarding international data transfer mechanisms, we offer European Union Model Clauses, also known as Standard Contractual Clauses, to meet adequacy and security requirements for our customers who operate in the European Union and the United Kingdom. A copy of our standard Data Processing Addendum, incorporating Model Clauses, is available by emailing support@deskpro.com.

We support international transfers using the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Agreement/Addendum (IDTA). Where relevant, Deskpro participates in the EU-U.S. Data Privacy Framework (and the UK Extension) as an additional transfer mechanism.

Updates

At Deskpro, the security and privacy of your data is a priority. We are committed to GDPR/UK GDPR compliance and to supporting our customers’ compliance obligations. If you have any questions about your rights under the GDPR as a user or about how Deskpro can assist you with compliance as a customer, please get in touch with us at support@deskpro.com.

Material updates to this page will be reflected in the “Last Updated” date. For broader information on our privacy, security, and compliance programs, visit the Trust Center.