GDPR FAQ

GDPR FAQ

What is GDPR?

GDPR is a new set of rules designed to give EU residents more control over their personal data. It aims to simplify the regulatory environment for business so both citizens and businesses in the European Union can fully benefit from the digital economy.

Under the terms of GDPR, organizations that collect and manage personal data, will have to ensure that the data is gathered legally as well as be obliged to protect it from misuse and exploitation. Organizations that fail to respect the rights of data owners will have to face penalties for not doing so.

Who does it apply to?

GDPR applies to any organization operating within the EU, as well as any organizations outside of the EU which offer goods or services to customers or businesses in the EU. Any data generated within the boundaries of the EU Union is bound by GDPR standards. That ultimately means that almost every major corporation in the world will need to be ready when GDPR goes into effect on May 25, 2018.

What personal data does PlanGrid collect and store, and for what purposes?

At the time of registration, users are required to provide their name and email address to sign up for a PlanGrid account. Additionally, users may provide project related data based on their use case.

PlanGrid also collects data via marketing events, webinars and training sessions. We retain basic user contact information to send product updates, relevant marketing, training and events.

Please refer to our privacy policy here for more information on how we collect and use personal data.

May I opt out of PlanGrid Communications?

We retain basic user contact information to communicate with our customers about product and security updates, relevant marketing, training and events. Plangrid users may opt-out of communications through any one of the below three methods:

  • Unsubscribe from the product emails through the user settings page (Refer to our helpdesk article for detailed steps)
  • Users can contact support, who can deactivate the product emails (this is useful for users who don’t ever use our website, since preferences cannot be managed through our mobile apps)
  • Using the unsubscribe links in the emails, the user can opt-out of both product emails and marketing emails

Where can I find information on PlanGrid’s security policies, management, and controls?

At PlanGrid, we understand that security of your data is vital to your business, and we take our responsibility to protect it very seriously. PlanGrid helps workers build better while safeguarding their data in the cloud by implementing stringent security measures and procedures at all levels, in accordance with industry-standard security programs. You can find more information about security measures at PlanGrid here.

Security and privacy certifications at PlanGrid

To give our customers added confidence that their data is secure and private, PlanGrid has taken the following initiatives -

a. SOC 2 compliance - PlanGrid has received SOC 2 Type I certification and is currently working towards SOC 2 Type II certification. A report can be requested under NDA by emailing security-request@plangrid.com.

b. Privacy Shield - PlanGrid is in the process of achieving both EU-U.S. and Swiss-U.S. Privacy Shield certifications.

Where does PlanGrid host customer data?

All our customer data is currently hosted in the AWS Virginia data center with data recovery set up at the AWS Oregon data center.

Will PlanGrid rectify / delete customer data when requested?

As a customer of PlanGrid, you have the ability to delete data that you upload into PlanGrid applications. Information about what data can be deleted or rectified and how it can deleted or rectified can be found in our Help Center. Organizations can remove users from the projects they own and deactivate the license. Users (individuals or organizations) can also request their data to be deleted / rectified by sending an email to privacy@plangrid.com.

Where can I find a list of PlanGrid’s sub processors?

The following is the list of major sub processors that PlanGrid uses. For a full list of sub processors please contact us at privacy@plangrid.com

Sub processorNature of Processing
AkamaiWeb Performance monitoring
AWSHosting service provider
Compose.ioDatabase service provider
GoogleAnalytics, productivity and collaboration tools
Live Chat IncCustomer chat support
LogentriesLogging and monitoring
Mailchimp / MandrillEmail marketing platform
OptimizelyCustomer experience optimization
SalesforceCustomer relationship management
ZendeskCustomer support platform

Sub-processor Updates

If you'd like to be notified when we add a new sub-processor, please subscribe to the email list below.