Platform Security

Empowering hybrid workplaces with robust security

We take security seriously and have strict safeguards for developing and deploying the YAROOMS platform.

YAROOMS Platform Security

YAROOMS network & application architecture

A quick visual guide to the YAROOMS network and application framework.

YAROOMS Network Architecture

Data centers #

YAROOMS utilizes Azure cloud hosting across multiple regions to ensure the highest standards of security and availability.

  • Azure USA North Virginia for all Customers
  • Azure Netherlands for EU and UK Customers
  • Azure Toronto for Canadian Customers

Data residency #

Data resides in the geographical region of the datacenter used for hosting.

Subprocessors #

Hosting

  • Azure USA North Virginia
  • Azure Toronto
  • Azure Netherlands

Customer Support Services

  • Hubspot US for Customers hosted in the US and CA datacenters
  • Hubspot Germany for Customers hosted in the EU datacenter

Data retention and removal #

Customer data is stored for the purpose of accessing and using the service. It can be deleted or anonymized at will by users with high privileges. All customer data is permanently deleted 30 days after the subscription is not renewed.

Uptime and system status #

The service’s performance is monitored continuously to ensure availability adheres to business standards. Potential issues or disruptions are reported on our status page .

Incident response #

In case of a security incident, data loss, or data breach, the Customers and/or pertinent authorities will be promptly notified, as per EU regulations.

Disaster recovery #

The service is operated redundantly, with backup environments always available for immediate failover and recovery.

Authentication #

End users can log in via SSO with Microsoft Teams, SAML 2.0 (ADFS, Okta, OneLogin, etc.), and Google Workspace. Password authentication is also available, and MFA is recommended for users with high privileges.

Encryption #

  • All data is encrypted in transit using SSL/TLS 1.2+ protocols. No endpoints of the service can be accessed without HTTPS.
  • Stored data has multiple levels of encryption: at rest, at the database level, and at the tenant level.

Payment #

YAROOMS uses Stripe as a payment processor, so no card information or sensitive payment details are stored in YAROOMS’ systems.

Collected data, privacy policies #

YAROOMS collects users’ email addresses as mandatory information for using the service, while users’ first names, last names, company names, company roles, or photos are optional. The way YAROOMS collects and uses private information is documented in the Privacy Policy .

Access logs #

All interactions of YAROOMS personnel with the systems, service, and customer data are logged. Personnel access to customer information follows the need-to-know principle.

EU GDPR #

YAROOMS is fully compliant with the European GDPR Regulation.

Security policies #

Strict security policies are in place for authentication, encryption, data access and sharing.

Customer support #

Customer Support is provided 24/5 at support@yarooms.com . Conversations are carried out in English only.

Certifications

Industry-recognized certifications that validate our commitment to security.

ISO 27001 ISO 27001
ISO 27701 ISO 27701
ISO 9001 ISO 9001
ISO 14001 ISO 14001
SOC2 Type 2 SOC2 Type 2
GDPR Compliant GDPR Compliant

Ready to see the big picture?

Managing spaces, resources, or team collaboration—we've got you covered.

Watch tour

We use cookies to analyze traffic and improve your experience.

Cookie preferences

Essential

Required for the site to function

Always on
Analytics

Help us understand how visitors use the site

Marketing

Used to deliver relevant ads

Talk to Sales or Support