Security, compliance & data protection
Security, compliance and data protection
This page sets out what data Bind holds when you send messages through Bind Flow, where that data sits, how long it is kept and who can reach it. It is written to be answered from directly — by anyone completing a vendor assessment, and by the security reviewer, data protection officer or procurement officer it gets forwarded to.
Certifications and standards
The standards Bind is certified against.
| Standard | What it covers | Status |
|---|---|---|
| ISO/IEC 27001 | Information security management | Certified |
ISO/IEC 27001
- What it covers
- Information security management
- Status
- Certified
Where data lives
Bind is EU-native. Here is where your data is stored, which entity processes it, and whether any of it leaves the EU.
Countries the data sits in
Germany and Croatia
Data is stored and processed in facilities in Germany and Croatia.
Legal entity that processes
Bind Technologies d.o.o.
The entity clients contract with, and the entity that processes data under that contract.
Does anything leave the EU
No
Your data is stored and processed inside the EU only.
What data Bind processes, and for how long
| Data category | What it is | Why it is held | Retention | Deletion on request |
|---|---|---|---|---|
| Account data | Represents your account; contains company and personal information | Account management and invoicing | While the contract is active, or until removal is requested | Yes, on request |
| Mobile phone numbers | The numbers your messages are sent to | Processing and delivering messages | Until removal is requested | Yes |
| Contact information | Contact details stored in your audiences | Processing and delivering messages | Until you remove it, or until removal is requested | Yes, you can remove it yourself |
| Statistical data | Performance statistics, such as delivery and click-through rates | Reporting on campaign performance | While the contract is active, or until removal is requested | Yes, on request |
Account data
- What it is
- Represents your account; contains company and personal information
- Why it is held
- Account management and invoicing
- Retention
- While the contract is active, or until removal is requested
- Deletion on request
- Yes, on request
Mobile phone numbers
- What it is
- The numbers your messages are sent to
- Why it is held
- Processing and delivering messages
- Retention
- Until removal is requested
- Deletion on request
- Yes
Contact information
- What it is
- Contact details stored in your audiences
- Why it is held
- Processing and delivering messages
- Retention
- Until you remove it, or until removal is requested
- Deletion on request
- Yes, you can remove it yourself
Statistical data
- What it is
- Performance statistics, such as delivery and click-through rates
- Why it is held
- Reporting on campaign performance
- Retention
- While the contract is active, or until removal is requested
- Deletion on request
- Yes, on request
Where to go next
Your security review gets answered by the people who run the platform
