User Enablement - UserPilot Privacy

What personal data does UserPilot access / process?

The only personal data that UserPilot access/ process are: Identification data (Hostname, Lastname, Username, Firstname, User-agent.); contact data (email); platform data and its use (First seen, Signed up, Last seen, Web sessions); device and browser info (Device type Browser language, Browser, Os, Viewport width, Viewport height); location (Country), for the sole purposes of improving threat modeling practitioners user experience by introducing in-app user guidance and enhancing IriusRisk cloud services.

Where does UserPilot host the data?

UserPilot hosting is AWS Europe (Paris) Region.

What contractual documentation has been signed regarding the processing of personal data by UserPilot? 

In addition to the services agreement, IriusRisk has signed with UserPilot a Data Protection Agreement (DPA) covering the processing of customer personal data and also Standard Contractual Clauses (SCCs), which ensure compliance with appropriate safeguards in relation to the international data transfer to the US.