Drooms is fully compliant with the GDPR.

Data protection & IT security

Drooms is fully compliant with the GDPR

You trust us with your confidential documents and we take that responsibility seriously by safeguarding your data using the highest security standards and handling protocols available. Drooms is GDPR compliant and always puts the privacy of its customers first. Our dataroom software solution is continuously audited to ensure that we adapt to new technologies as they develop. We also work to keep improving our internal processes for handing your sensitive data.

What is the GDPR?

The data protection regulation is an EU regulation with the aim to protect personal data
It came into effect in May 2018 and replaced the Data Protection Directive 95/46/EC as well as all regulations of single EU countries.
The GDPR applies to all companies based in the EU, but also to companies based outside the EU if they have a branch in the EU or process personal data of EU residents.
Personal data is any information leading to a person's identification e.g. name, email adress, ID number, location data, income and bank details, health information and IP address

For any questions or if you need more information please contact our Data Protection Team via: dataprotection@drooms.com

Maximum security and GDPR compliance with Drooms

Measures taken to protect data from unjustified modification, processing or loss:

Drooms ISO 27001:2013 and 27018 certified
Drooms GmbH fulfills the requirements of the GDPR and is as an organization as well as software GDPR compliant. The data protection report from our Data Protection Officer can be found here
Maintenance of servers is taken care of by Drooms GmbH in Frankfurt alone
Technical and Customer Support Services directly carried out by Drooms GmbH
Regular penetration tests are carried out to assess data security
High availability server solutions
Detailed real-time analytics down to a single document page
Individual granting of review, print, and/or storage authorisations on the user and document level
Multi-factor authentication process with PIN and SMS

How we encrypt all data

At Drooms all data transfers are completed via TLS connections only and get encrypted with AES 256-bit.

Where we store all data

The provision of the contractually agreed data processing takes place exclusively in the EU or Switzerland. Any transfer to another third country requires your consent.

Limit access by IP filtering

The possibility to limit data room access at group level to specific devices with specific IP addresses is available. This ensures the data room is only accessed via a specific company network for example.

Data confidentiality

Two factor authentication and access controls are just some of the ways clients have autonomy on how and whether their data is kept.

Vulnerability management

Drooms performs internal vulnerability scans and safety tests. In case of an emergency our disaster scenario plan guarantees that data remains unaffected.

External security audits

As an ISO 27001: 2013 certified company, Drooms GmbH regularly carries out external and internal security audits to ensure safety and comply with regulations.

DROOMS CHECKLIST

Download the GDPR data room provider checklist and find out how committed your cloud service provider is.

Have questions?

Ask us!

First name

Last name

Phone

Company

Country:

Country

Message

By clicking "Submit", I agree to be contacted by Drooms GmbH or Drooms AG via e-mail or telephone (if provided) in order to process my request and in accordance with Drooms' privacy policy.

Drooms is fully compliant with the GDPR.

Data protection & IT security

Drooms is fully compliant with the GDPR

What is the GDPR?

Maximum security and GDPR compliance with Drooms

Measures taken to protect data from unjustified modification, processing or loss:

How we encrypt all data

Where we store all data

Limit access by IP filtering

Data confidentiality

Vulnerability management

External security audits

DROOMS CHECKLIST

Download the GDPR data room provider checklist and find out how committed your cloud service provider is.

Data room user rights

IP filtering

Data privacy made in Germany

Personal data

Processing activity

Security

Have questions?

Ask us!

Solutions

Use cases

About us

Resources

Your account

Copyright © 2022 by Drooms