Data Protection Registration
PeopleHR is now wholly owned by Access UK Ltd and is registered with the Information Commissioner’s Office (ICO) Z5042164 Our Data Protection Officer can be contacted at [email protected]
Data
Who owns our data?
You do – as our customer, you are classed as a ‘data controller’. As your supplier, we are classed as a ‘data processor’.
Where is our data stored – and is it safe?
For UK and EU customers we store your data in Telehouse N2 (London). For our APAC customers, we use Equinix SYD.
All Data Centres only provide “co-location” services because our Cloud Hosting Services team manage the whole environment. We protect it using multiple layers of technology – all reporting back into our SIEM solution which is monitored 24x7.
Physical security controls include biometric access controls, man trap access, admission by appointment only, 24x7 on site security staff and constant surveillance.
Environmentally there are redundant power feeds and generators, robust fire suppression systems, and carefully monitored climate control.
In addition to all the technology and physical controls in place, as an ISO27001:2013 certified organisation, we ensure our staff are security trained (and tested), and further implement role based access control with least privilege access.
Who can access my data?
Only you, and a small number of vetted and authorised Access personnel, can access your data at your request.
What happens to our data when we leave?
We provide you with an export of all your data and a self-serve link will be provided. We will then remove it from our systems within 30 days.
For more information, Access provides a client security portal (registration required) which contains an extensive library of security information - Download the Portal Guide here