Our commitments
- Your directory data serves only you. Everything synced from your directory is Organization Data. It is used solely to provide Sprooster to your organization: never for advertising, never shared with or used by other products, and never used to train AI models.
- No biometrics, ever. Profile photos are display-only (and optional). We never run face detection, face recognition, or any other biometric processing on them.
- Sync what you choose. Data flows from your directory into Sprooster through configurable scopes, you choose what fields do or do not sync. Directory credentials are encrypted before storage and are write-only through our interface.
- Minimal analytics, no recording. Session recording is disabled in our analytics configuration. Analytics on Organization Data never goes beyond aggregate counts, and events carry internal identifiers, not names or email addresses. Error reports are scrubbed of personal data before they leave the application.
- Deletion is prompt and complete. When a workspace is deleted, its data is deleted within 30 days and leaves encrypted backups within 90. Organizations can export their full workspace at any time.
Product security
- Single sign-on and provisioning. SAML SSO and SCIM 2.0 provisioning are supported, so your identity provider stays the source of truth for who can sign in and who exists in the directory.
- Tenant isolation. Each organization's data is scoped to that organization on every access path. The database is reachable only from our servers, never directly from the browser.
- Encryption. Data is encrypted in transit (TLS) and at rest by our infrastructure providers.
Sub-processors
The vendors that process personal data on our behalf are listed at /legal/subprocessors, where organizations can subscribe to be notified before the list changes.
Questions or Concerns?
We're glad to complete security questionnaires or walk your team through our architecture and controls, and a Data Processing Agreement is available to customer organizations on request. Email privacy@sprooster.com for any questions or concerns.