Our commitments
- Your directory data serves only you. Everything synced from your directory is Organization Data. It is used solely to provide Sprooster to your organization: never for advertising, never shared with or used by other products, and never used to train AI models.
- No biometrics, ever. Profile photos are display-only. We never run face detection, face recognition, or any other biometric processing on them.
- Sync is one-way and read-only. Data flows from your directory into Sprooster through read-only scopes; we never write back to a connected directory. Directory credentials are encrypted before storage and write-only through our interface.
- Minimal analytics, no recording. Session recording is disabled in our analytics configuration. Analytics on Organization Data never goes beyond aggregate counts, and events carry internal identifiers, not names or email addresses. Error reports are scrubbed of personal data before they leave the application.
- Deletion is prompt and complete. When a workspace is deleted, its data is deleted within 30 days and leaves encrypted backups within 90. Organizations can export their full workspace at any time.
Enforced in code
These commitments are wired into our engineering process, not filed away in a policy document. An automated check suite runs against every change and fails the build if a change would enable session recording, put personal data into analytics events or error reports, or add a table holding personal data without covering it in workspace export and deletion. The deletion and export paths are derived from the database schema itself, so new data cannot silently fall outside them.
Product security
- Single sign-on and provisioning. SAML SSO and SCIM 2.0 provisioning are supported, so your identity provider stays the source of truth for who can sign in and who exists in the directory.
- No passwords held. Sign-in is handled by our authentication provider; we never store or see your password.
- Tenant isolation. Each organization's data is scoped to that organization on every access path. The database is reachable only from our servers, never directly from the browser.
- Encryption. Data is encrypted in transit (TLS) and at rest by our infrastructure providers.
Sub-processors
The vendors that process personal data on our behalf are listed at /legal/subprocessors, where organizations can subscribe to be notified before the list changes.
Certifications and questionnaires
We do not yet hold a SOC 2 or ISO 27001 certification, and we won't claim one here until we do. In the meantime we're glad to complete security questionnaires and walk your team through our architecture and controls, and a Data Processing Agreement is available to customer organizations on request. The contact details are in our privacy policy.