Is Harmonic Security UK GDPR compliant?

answer from its trust card · not checked yet

> short_answer

Harmonic Security handles customer data, so it acts as a supplier under UK GDPR. You’ll want a contract that covers processing, and to check where the data goes. The facts below are from its trust card.

No tool is “compliant” on its own; compliance depends on how you use it. This page shows the facts you need to decide.

The facts that matter for UK GDPR

Data location: AWS in the EU or US. The sub-processor list says processing stays in your region by default; EU hosting is available on request.○ unclaimed
Sub-processors: AWS (hosting), Auth0 / Okta (sign-in), ClickHouse (database), Sentry (error logs; customer data excluded by default), Kombo (HR system link), HubSpot (CRM, EU), Pendo (usage analytics, EU; you can opt out).○ unclaimed

What you still need to do

  1. Add it to your record of processing. Pre-filled entry
  2. Check your contract covers processing and any transfers abroad. DPIA starter
  3. Watch it, so you hear if any of this changes. Watch Harmonic Security

Alternatives that keep data in the UK or on your devices