Privacy and Trust Center

Privacy Notices

We value your privacy and trust. The WorkForce Software Privacy Center makes it easy to find information about how we collect and use your information:

• Privacy around data collected for marketing, from our customers, and by our SaaS products
• Privacy around data collected from people applying for a career with WorkForce Software
• Privacy around data collected from our employees

Data Collected Using Cookies

• Cookie Notice

You can manage your cookie preferences through your browser settings. Some browsers allow you to whitelist sites from which you accept cookies. For more details on managing cookie preferences, see below:

• Website Cookies: http://www.allaboutcookies.org/manage-cookies/
• Mobile Cookies: http://www.allaboutcookies.org/mobile/index.html
• Digital Advertising Alliance Opt-Out Cookie Tool for “online behavioral” or “interest-based” advertising: http://optout.aboutads.info/#!/

Special Topics Related to Privacy or Security

• Biometric Privacy Policy
• Geolocation Data Collection: Technical Information

Audit and Assurance

WorkForce Software is committed to helping customers operate globally in a fast-changing business environment and address the challenges of an ever more complex regulatory environment. WorkForce Software provides customers with third-party attestations or certifications around WorkForce Suite. These attestations and certifications can assist in your compliance and reporting programs.

Customers can obtain copies of our attestations and certifications from our Customer Portal or through their Account Relationship Manager or Sales Executive. Available attestations and certifications include:

• SOC 1 Type II – Our customers reference this report for assurance that our controls governing financial processing and reporting are suitable and operating effectively.
• SOC 2 Type II – Our customers reference this report for assurance that our controls that mitigate information security and privacy risks are suitable and operating effectively.
• ISO 27001 – This certification validates that we have implemented policies, procedures, legal, physical, and technical controls for an overall Information Security Program. This certification gives our customers assurance that our Information Security program conforms to recognized international standards.
• ISO 27017 – This certification validates that we have implemented security controls in the cloud environment and ensures that customers personal data is processed securely. This certification gives our customers assurance that our Cloud Service Security controls conforms to recognized international standards.
• ISO 27018 – This certification validates that we have implemented privacy controls in the cloud environment and ensures our customers that their data is protected in the cloud.
• ISO 27701 – This certification validates that we have implemented policies, procedures, legal, physical, and technical controls for an overall Privacy Program. This certification gives our customers assurance that our Privacy Information program conforms to recognized international standards.

We also use third parties to provide independent security testing, including:

• Quarterly Vulnerability Scan Reports – These reports provide our customers’ assurance that our information security controls monitor and manage network vulnerabilities.
• Annual Web Application Security Assessment – Our customers reference this report for evidence that a third-party has evaluated WorkForce Suite for security vulnerabilities.
• Annual Data Center Penetration Test – Our customers reference this report for evidence that a third-party has evaluated WorkForce’s systems and network security for vulnerabilities that external adversaries could exploit.

Copies of these reports are also available to customers.