Cyberday
Cyberday splits chosen frameworks (e.g. ISO 27001, NIST CSF, ISO 27701) down to prioritized security tasks and guides you in implementing them. It's our modern take on building an ISMS (information security management system).Cyberday is used to
* delegate admin tasks related to information security and gather evidence of their implementation
* document important security actions and assets
* distribute security guidelines for whole company personnel and get acceptance
* create different reports of your overall compliance and different security themesThrough our Cyberday app for Slack you can receive e.g. the following notifications
* Weekly digest of your own admin responsibilities
* Reminders of item reviews or upcoming deadlines
* Monthly digest of employee guideline status
* delegate admin tasks related to information security and gather evidence of their implementation
* document important security actions and assets
* distribute security guidelines for whole company personnel and get acceptance
* create different reports of your overall compliance and different security themesThrough our Cyberday app for Slack you can receive e.g. the following notifications
* Weekly digest of your own admin responsibilities
* Reminders of item reviews or upcoming deadlines
* Monthly digest of employee guideline status
Permissions
Cyberday will be able to view:
Cyberday will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Agendium Ltd
Company headquarters location
Finland
Terms of service
Privacy & data governance
Data retention policy
Agendium Ltd maintains an ISO 27001 -certified ISMS that contains up-to-date data retention policies and retention times for different data sets.
For Cyberday customer data the following are main principles:
- Customers can use a 14-day free trial
- After this the account is kept active, if the customer makes an order
- Non-active accounts are closed after trial ends or subscription is cancelled
- After an account has been closed for 3 months, account and its data is removed
Data archiving and removal policy
Agendium Ltd maintains an ISO 27001 -certified ISMS that contains up-to-date data retention policies and retention times for different data sets.
For Cyberday customer data the following are main principles:
- Customers can use a 14-day free trial
- After this the account is kept active, if the customer makes an order
- Non-active accounts are closed after trial ends or subscription is cancelled
- After an account has been closed for 3 months, account and its data is removed
Data storage policy
Agendium Ltd maintains an ISO 27001 -certified ISMS that contains up-to-date data processing policies and used data systems.
Data is stored on Heroku and backed up continuously for 4 days and automatically daily for longer periods.
Data center location(s)
Ireland
Data hosting details
Cloud hosted in EU region, main database in AWS, backed up continuously for 7 days and weekly for 3 months.
Data hosting company
Heroku & AWS
App/service has sub-processors
no
Guidelines for sub-processors
App/service uses large language models (LLM)
no
Certifications & compliance
ISO/IEC-27001 certification
GDPR commitment
Data deletion request procedure
When someone requests deleting their personal data, we verify their identity and delegate the request to correct datastore owner who oversees actual deleting of data and notifies the user.
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2024-05-30
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Google and Microsoft via Auth0, Microsoft via Teams
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
team@cyberday.ai
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Third party services used by this app
Auth0, Inc. (authentication)
Stripe, Inc. (payments)
Intercom (customer support)
The Rocket Science Group (email API)
Uses token rotation
yes