GDPR Compliance

We are Committed to the Highest Standards of Data Protection, Security and Compliance

GDPR's Global Impact

The GDPR harmonizes data privacy laws and regulations across the EU, enhances data protection for EU citizens and reshapes the way organizations approach data privacy. The GDPR covers the personal data of every EU person and provides comprehensive rights to data subjects.

Every company that works with European employees, customers and partners will need to comply with the regulation. Failure to meet the GDPR requirements can result in fines up to EUR 20 million or up to 4% of the company's worldwide annual turnover for the preceding fiscal year, whichever is higher.

Our GDPR Commitment

Since our inception, MangoApps approach has been anchored with a strong commitment to privacy, security, compliance and transparency. Like existing privacy laws, compliance with the GDPR requires a partnership between MangoApps and our customers in their use of our services. We have analyzed the requirements of the GDPR, and have made enhancements to our products and processes to support compliance with this regulation. To further earn our customers' trust, we have a Data Processing Addendum ("DPA") for our customers with contractual commitments regarding our compliance with the provisions required by the GDPR. Our commitment guarantees that customers can:

• Respond to requests from data subjects to correct, amend or delete personal data.
• Be made aware of and report personal data breaches to relevant supervisory authorities and data subjects in accordance with GDPR timeframes.
• Demonstrate their compliance with the GDPR as pertaining to MangoApps Services.

GDPR Readiness with MangoApps

MangoApps has a proven history of over 18 years in ensuring data privacy and trust of our customers. This trust and commitment has continued in our journey to be GDPR ready. Here are some of the key steps done at MangoApps to be ready for GDPR and other privacy & data protection regulations:

• MangoApps is hosted on AWS cloud and uses hundreds of security & compliance features of AWS to maintain the highest-level data privacy and protection standards.
• MangoApps ongoing product innovation over the last couple of years has added data portability and data management features to the platform to help serve its customers with their data privacy obligations.
• MangoApps has upgraded its organizational control and processes and added to it regular reviews of the technical and compliance programs, to ensure that they are strong and up to date.

Security, Encryption and Certifications

MangoApps encrypts Customer Data in transit (TLS) and at rest, and maintains role-based access controls, intrusion detection, network segregation, logical tenant isolation, vulnerability management, and a documented incident response plan. The full technical and organizational measures are set out in Annex 2 of our Data Processing Agreement (provided to customers during contracting). In the event of a personal data breach, MangoApps notifies affected customers without undue delay and in any event within seventy-two (72) hours of becoming aware, as committed in the DPA. Enterprise procurement and security teams may request our current third-party audit reports and certifications (such as SOC 2), sub-processor history, and BCP/DR summary at legal@mangoapps.com.

Use of Subprocessors

To support the delivery of our services, we engage with several trusted subprocessors. These subprocessors are carefully selected to ensure that they meet the high standards set by GDPR for data protection and security. We review and monitor our subprocessors regularly to ensure ongoing compliance and to safeguard your personal information.

For a detailed list of our current subprocessors, including their roles and the services they provide, please visit our dedicated page: GDPR Subprocessors.

Sign Your DPA

We make it easy for our customers to formalize and share with their stakeholders, including employees, customers and potential auditors, that they use MangoApps in a way that meets GDPR data processing obligations. The Data Processing Addendum (DPA), is a self-serve and easy-to-execute document that only requires you to contact us with your request. We will send you a MangoApps pre-signed copy which you then electronically sign and email it back to the MangoApps legal team.