Kontent.ai & the General Data Protection Regulation
What is GDPR?
GDPR is an acronym for the General Data Protection Regulation that was created to bring as much uniformity to data protection as possible. The new legislation will replace an existing EU 1995 Directive, which was implemented into national data protection laws. However, there could still be significant differences between states. Now that it is a regulation, it is directly applicable. It also means that if someone wants to do business in Ireland, for instance, they can now be sure that a similar legal regime exists in other member states too. This new regulation is better suited to the challenges our current digital world poses.
The GDPR legislation came into effect on May 25, 2018.
For more information about the GDPR, see the Official Journal of the European Union.
Our commitment to the GDPR
Kontent.ai is very committed to achieving full compliance with GDPR. We value the privacy and security of our customers above anything else, and that's why we had already started dedicating resources in 2017 to make sure we had everything ready before the legislation came into effect.
If you have any questions regarding Kontent.ai's GDPR compliance, please do not hesitate to contact us at any time.
The personal data we collect
We store only necessary personal information about our users. Detailed information on what personal information we collect and why are available in our Privacy policy and Cookies policy.
Data storage
Kontent.ai stores the data in Microsoft Azure storage. You can choose to store your project data in a data center in Europe (the Netherlands), the United States (Virginia), and Australia (New South Wales). By choosing the location of the data center, your project data and tracked visitor data are stored in the selected area. Project data represents all your content created within the Kontent.ai application. You can find more information about the data centers here.
This does not include the user (meta)data required for the Kontent.ai service to work, which will always be stored in the data center located in West Europe. The reason behind this is that users in Kontent.ai can work on different projects across multiple data centers.
Kontent.ai uses a global Content Delivery Network (CDN) powered by Fastly to deliver content from your website. The CDN has edge nodes all around the world, ensuring fast content delivery no matter the destination.
Data security
We believe in security by design. That's why all our developers have to attend security training and we have a dedicated security team that regularly performs security code reviews and website security scans. Moreover, Kontent.ai data is stored in secure Microsoft Azure data centers and all encrypted by default.
We also have a vulnerability management program in place whose goal is to inspect for any new vulnerabilities, and any threats found are fixed within a few hours/days by our teams and security experts.
For more information about the security of Kontent.ai, please visit our Security page.
Of course, as users, you have the same rights as your visitors or customers. Therefore, if you want to trigger any of the data subject rights for any of your current or former users of Kontent.ai, please at the following e-mail address: [email protected].
We will do everything we can in order to prevent any incidents involving your and/or your customers' data.
The use of subprocessors
In order to provide you with the best experience for working with content, we use some services provided by third-party vendors. Every vendor has to pass strict security evaluation criteria and has to be compliant with data protection laws. You can find a list of all the services we use on this page. Moreover, here you can also see a list of all third-party software licenses that we use in our product.