PLATFORM SECURITY

Empowering hybrid workplaces with robust security

We take security seriously and have strict safeguards for developing and deploying the YAROOMS platform.

 

Yaroom Platform Security Compliance
Platform Security

 

YAROOMS network & application architecture

A quick visual guide to the YAROOMS network and application framework.

 

YAROOMS network & application architecture

A quick visual guide to the YAROOMS network and application framework.

Network_2x-1
network and application architecture
Data centers

Data centers

  • YAROOMS is a cloud service using Azure hosting infrastructure in multiple regions:
    • Azure USA North Virginia for all Customers
    • Azure Netherlands for EU and UK Customers
    • Azure Toronto for Canadian Customers

  • For more information, visit Azure Security and Azure Compliance.
Data residency

Data residency

Data resides in the geographical region of the datacenter used for hosting.

Subprocessors

Subprocessors

  • Hosting:
    • Azure USA North Virginia
    • Azure Toronto
    • Azure Netherlands

  • Customer Support Services:
    • Hubspot US for Customers hosted in the US and CA datacenters
    • Hubspot Germany for Customers hosted in the EU datacenter
Data retention and removal

Data retention and removal

Customer data is stored for the purpose of accessing and using the service. It can be deleted or anonymized at will by users with high privileges. All customer data is permanently deleted 30 days after the subscription is not renewed.
Uptime and system status

Uptime and system status

The service's performance is monitored continuously to ensure availability adheres to business standards. Potential issues or disruptions are reported here.
Incident response

Incident response

In case of a security incident, data loss, or data breach, the Customers and/or pertinent authorities will be promptly notified, as per EU regulations.
Disaster recovery

Disaster recovery

The service is operated redundantly, with backup environments always available for immediate failover and recovery.
Authentication

Authentication

End users can log in via SSO with Microsoft Teams, SAML 2.0 (ADFS, Okta, OneLogin, etc.), and Google Workspace. Password authentication is also available, and MFA is recommended for users with high privileges.
Encryption

Encryption

  • All data is encrypted in transit using SSL/TLS 1.2+ protocols. No endpoints of the service can be accessed without HTTPS.

  • Stored data has multiple levels of encryption: at rest, at the database level, and at the tenant level.
Payment

Payment

YAROOMS uses Stripe as a payment processor, so no card information or sensitive payment details are stored in YAROOMS’ systems.
Collected data, privacy policies

Collected data, privacy policies

YAROOMS collects users’ email addresses as mandatory information for using the service, while users’ first names, last names, company names, company roles, or photos are optional. The way YAROOMS collects and uses private information is documented in the Privacy Policy.
Access logs

Access logs

All interactions of YAROOMS personnel with the systems, service, and customer data are logged. Personnel access to customer information follows the need-to-know principle.
EU GDPR

EU GDPR

YAROOMS is fully compliant with the European GDPR Regulation.
Certifications

Certifications

  • ISO 27001
  • ISO 27701
  • ISO 9001
  • ISO 14001
  • SOC2 Type 1
  • GDPR Compliant
Security policies

Security policies

Strict security policies are in place for authentication, encryption, data access and sharing.
Customer support

Customer support

Customer Support is provided 24/5 at support@yarooms.com. Conversations are carried out in English only.
Contact

Ready to see the big picture?

Learn how thousands of forward-thinking organizations use YAROOMS to manage
their workplaces. Join us for a Live Demo or watch the On-demand Platform Tour.

Ready to see the big picture?
 
Learn how thousands of forward-thinking organizations use YAROOMS to manage
their workplaces. Join us for a Live Demo or watch the On-demand Platform Tour.
 
Schedule a demo Platform Tour