Confirm, Inc. (“Confirm,” “we,” “our”) offers a variety of HR & team collaboration and organizational tools available online, including via mobile (collectively, the “Service“), and websites, including but not limited to www.confirm.com, confirmhr.com, and confirmhq.com (the “Websites“).
Confirm has three different types of users depending on the Confirm products used:
We refer to these three types of users collectively as “Users” or “you” for purposes of these User Terms of Service (the “Terms“). Regardless of what type of User you are, these Terms create a legal agreement directly between you and Confirm and explain the rules governing use of the Service and Websites. By accessing or using the Service and Websites, you acknowledge and agree that you have read, understand, and agree to be bound by these Terms. If you do not agree to these Terms, please do not access or use the Service and Websites.
IMPORTANT NOTICE: DISPUTES ABOUT THESE TERMS AND THE SERVICE AND WEBSITES PROVIDED BY CONFIRM ARE SUBJECT TO BINDING ARBITRATION AND A WAIVER OF CLASS ACTION RIGHTS AS DETAILED IN THE “MANDATORY ARBITRATION AND CLASS ACTION WAIVER” SECTION BELOW.
We may, from time to time, modify these Terms. Please check this page periodically for updates. If you do not agree to, or cannot comply with, the modified Terms, you must stop using the Service and Websites. The updated Terms will take effect upon their posting and will apply on a going-forward basis, unless otherwise provided in a notice to you, and except as provided in the Mandatory Arbitration and Class Action Waiver section of these Terms. Your continued use of the Service and Websites after any such update constitutes your acceptance of such changes.
1.1 General. To use the Service and Websites you must be, and represent and warrant that you are, at least 13 years of age and competent to agree to these Terms. If Confirm has previously prohibited you from accessing or using the Service and Websites, you are not permitted to access or use the Service and Websites.
1.2 Location. These Terms are applicable to Users located in the United States only. If you are located outside of the United States, you will be presented with a different set of terms.
2.1 Account Registration and Confidentiality. To access the Service and Websites, you must register for an Confirm account by creating a user name and password or using a third party for authentication. You agree to provide us with accurate, complete, and current registration information about yourself. It is your responsibility to ensure that your password remains confidential and secure. By registering, you agree that you are fully responsible for all activities that occur under your account. We may assume that any communications we receive under your account have been made by you. If you are a billing owner, an administrator, or if you have confirmed in writing that you have the authority to make decisions on behalf of a Customer (“Account Administrator“), you represent and warrant that you are authorized to make decisions on behalf of the Customer and agree that Confirm is entitled to rely on your instructions.
2.2 Unauthorized Account Use. You are responsible for notifying us at [email protected] if you become aware of any unauthorized use of or access to your account. You understand and agree that we may require you to provide information that may be used to confirm your identity and help ensure the security of your account. Confirm will not be liable for any loss, damages, liability, expenses or attorneys’ fees that you may incur as a result of someone else using your password or account, either with or without your knowledge and/or authorization, and regardless of whether you have or have not advised us of such unauthorized use. You will be liable for losses, damages, liability, expenses and attorneys’ fees incurred by Confirm or a third party due to someone else using your account. In the event that the Account Administrator or Customer loses access to an account or otherwise requests information about an account, Confirm reserves the right to request from the Account Administrator or Customer any verification it deems necessary before restoring access to or providing information about such account in its sole discretion.
The Service and Websites are owned and operated by Confirm and contain materials (including all software, design, text, editorial materials, informational text, photographs, illustrations, audio clips, video clips, artwork and other graphic materials, and names, logos, trademarks and services marks) which are derived in whole or in part from materials supplied by Confirm and its partners, as well as other sources, and are protected by United States copyright laws, international treaty provisions, trademarks, service marks and other intellectual property laws. The Service and Websites are also protected as a collective work or compilation under U.S. copyright and other law and treaties. You agree to abide by all applicable copyright and other laws, as well as any additional copyright notices or restrictions contained in the Service and Websites. You acknowledge that the Service and Websites have been developed, compiled, prepared, revised, selected, and arranged by Confirm and others through the application of methods and standards of judgment developed and applied through the expenditure of substantial time, effort, and money and constitute valuable intellectual property of Confirm and such others. You agree to protect the proprietary rights of Confirm and all others having rights in the Service and Websites during and after the term of these Terms and to comply with all written requests made by Confirm or its suppliers and licensors (collectively, “Suppliers”) of content or otherwise to protect their and others’ contractual, statutory, and common law rights in the Service and Websites. You agree to notify Confirm immediately upon becoming aware of any claim that the Service and Websites infringe upon any copyright, trademark, or other contractual, statutory, or common law rights. All present and future rights in and to trade secrets, patents, copyrights, trademarks, service marks, know-how, and other proprietary rights of any type under the laws of any governmental authority, domestic or foreign, including without limitation rights in and to all applications and registrations relating to the Service and Websites shall, as between you and Confirm, at all times be and remain the sole and exclusive property of Confirm. Any unauthorized use of any material contained on or through the Service and Websites may violate copyright laws, trademark laws, the laws of privacy and publicity and communications regulations and statutes.
4.1 User Content and Submissions on the Service. The Service allows you to create tasks and submit associated information, text, files, and other materials (collectively, “User Content”) and to share that User Content with others. User Content submitted or otherwise made available to the Service is subject to the following terms:
4.1.2 Subscriber User Content on the Service. Content submitted to the Service by Subscribers (“Subscriber User Content”) is owned and controlled by the Customer as set forth in the introduction to these Terms and the Customer Agreement, except with respect to Subscriber User Content submitted by students pursuant to a Customer Agreement with an educational institution (“Student Content”). Such Student Content is owned by the student and not the educational institution. Confirm maintains a limited, non-exclusive and non-transferrable (except in connection with the sale or transfer of its business) license to access, use, copy, reproduce, process, adapt, publish, transmit, host, and display Subscriber User Content for the following limited purposes: (i) to maintain, provide and improve the Service; (ii) to prevent or address technical or security issues and resolve support requests; (iii) to investigate when we have a good faith belief, or have received a complaint alleging, that such Subscriber User Content is in violation of the Customer Agreement or these Terms; (iv) to comply with a valid legal subpoena, request, or other lawful process that meets the requirements of the Customer Agreement and law enforcement; and (v) as otherwise set forth in our Customer Agreement or as expressly permitted in writing by the Customer.
4.2 Feedback on the Websites. The Websites may have certain features that allow you to submit comments, information, and other materials (collectively, “Feedback”) to Confirm and share such Feedback with other users, or the public. By submitting Feedback through the Websites, you grant Confirm a license to access, use, copy, reproduce, process, adapt, publish, transmit, host, and display that Feedback for any purpose (including in testimonials or other Confirm marketing materials and where required to do so by law or in good faith to comply with legal process.). We reserve the right to remove any Feedback posted in public forums for any reason at our sole discretion.
4.3 User Content and Feedback Representations. You acknowledge and agree that you have all required rights to submit User Content and Feedback without violation of any third-party rights. You understand that Confirm does not control, and is not responsible for, User Content or Feedback, and that by using the Service and/or Websites, you may be exposed to User Content or Feedback from other users that is offensive, indecent, inaccurate, misleading, or otherwise objectionable. Please also note that User Content and Feedback may contain typographical errors, other inadvertent errors or inaccuracies. You agree that you will indemnify, defend, and hold harmless Confirm for all claims resulting from User Content or Feedback you submit through the Service and/or Websites. We reserve the right, at our own expense, to assume the exclusive defense and control of such disputes, and in any event you will cooperate with us in asserting any available defenses.
5.2 Acceptable Use.
All Users must comply with the following rules regarding acceptable use of the Service and Websites.
Disruption of the Service. You may not:
Misuse of the Service and Websites. You may not utilize the Service and Websites to carry out, promote or support:
User Content Standards Within the Service and Websites. You may not post any User Content on the Service or Websites that:
Violations of this Section 5. In addition to any other remedies that may be available to us, Confirm reserves the right to take any remedial action it deems necessary, including immediately suspending or terminating your account or your access to the Service or Websites, upon notice and without liability for Confirm should you fail to abide by the rules in this Section 5 or if, in Confirm’s sole discretion, such action is necessary to prevent disruption of the Service or Websites for other users. If you are a Subscriber, Confirm reserves the right to notify the Customer’s Account Administrator(s) or other Customer representative(s) of any violations of these Terms.
THE SERVICE AND WEBSITES AND USER CONTENT, WHETHER PROVIDED BY Confirm, ITS LICENSORS, ITS VENDORS OR ITS USERS, AND OTHER INFORMATION ON OR ACCESSIBLE FROM THE SERVICE AND WEBSITES ARE PROVIDED “AS IS” WITHOUT WARRANTY, REPRESENTATION, CONDITION, OR GUARANTEE OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY IMPLIED WARRANTIES, REPRESENTATIONS, CONDITIONS OR GUARANTEES OF QUALITY, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ALL OF WHICH ARE DISCLAIMED TO THE FULLEST EXTENT PERMITTED BY LAW. SPECIFICALLY, BUT WITHOUT LIMITATION, Confirm DOES NOT WARRANT THAT: (i) THE INFORMATION AVAILABLE ON THE SERVICE AND WEBSITES IS FREE OF ERRORS; (ii) THE FUNCTIONS OR FEATURES (INCLUDING BUT NOT LIMITED TO MECHANISMS FOR THE DOWNLOADING AND UPLOADING OF USER CONTENT) WILL BE UNINTERRUPTED, SECURE, OR FREE OF ERRORS; (iii) DEFECTS WILL BE CORRECTED, OR (iv) THE SERVICE AND WEBSITES OR THE SERVER(S) THAT MAKE THE SERVICE AND WEBSITES AVAILABLE ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. IN NO EVENT SHALL Confirm OR ITS AFFILIATES, LICENSORS, VENDORS, OR ANY OF THEIR RESPECTIVE DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, OR OTHER REPRESENTATIVES BE LIABLE TO YOU OR ANY OTHER PERSON OR ENTITY FOR ANY INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS OF PROFITS, LOSS OF DATA, LOSS OF USE, OR COSTS OF OBTAINING SUBSTITUTE GOODS OR SERVICES), ARISING OUT OF OR IN CONNECTION WITH THE SERVICE AND WEBSITES, ANY MATERIALS, INFORMATION, OR RECOMMENDATIONS APPEARING ON THE SERVICE AND WEBSITES, OR ANY LINK PROVIDED ON THE SERVICE AND WEBSITES, WHETHER OR NOT Confirm HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND WHETHER BASED UPON WARRANTY, CONTRACT, TORT, STRICT LIABILITY, VIOLATION OF STATUTE, OR OTHERWISE. THIS EXCLUSION OF LIABILITY SHALL APPLY TO THE FULLEST EXTENT PERMITTED BY LAW. IN ANY EVENT, OUR AGGREGATE LIABILITY WILL NOT EXCEED THE AMOUNT PAID FOR THE SERVICE OR WEBSITES TO WHICH THE CLAIM RELATES OR, IF THE CLAIM DOES NOT RELATE TO A PRODUCT OR SERVICE, $100. CONFIRM DOES NOT WARRANT, ENDORSE, GUARANTEE OR ASSUME RESPONSIBILITY FOR ANY PRODUCT OR SERVICE ADVERTISED OR OFFERED BY A THIRD PARTY THROUGH THE SERVICE AND WEBSITES OR ANY WEBSITE FEATURED OR LINKED TO THROUGH THE SERVICE AND WEBSITES, AND CONFIRM WILL NOT BE A PARTY TO OR IN ANY WAY BE RESPONSIBLE FOR MONITORING ANY TRANSACTION BETWEEN YOU AND THIRD-PARTY PROVIDERS OF PRODUCTS OR SERVICE AND WEBSITES. CONFIRM WILL NOT BE LIABLE FOR THE OFFENSIVE OR ILLEGAL CONDUCT OF ANY THIRD PARTY. YOU VOLUNTARILY ASSUME THE RISK OF HARM OR DAMAGE FROM THE FOREGOING. THE FOREGOING LIMITATIONS WILL APPLY EVEN IF A REMEDY FAILS OF ITS ESSENTIAL PURPOSE AND TO THE FULLEST EXTENT PERMITTED BY LAW. If you are a California resident, you hereby waive California Civil Code §1542, which says: “A general release does not extend to claims which the creditor does not know or suspect to exist in his favor at the time of executing the release, which if known by him or her must have materially affected his or her settlement with the debtor.” This release includes the criminal acts of others.
Some jurisdictions do not allow the exclusion of certain warranties or the limitation or exclusion of liability for incidental or consequential damages such as above in Section 7. Accordingly, some of the above limitations may not apply to you. If you are a New Jersey resident, or a resident of another state that permits the exclusion of these warranties and liabilities, then the limitations in Section 7 specifically do apply to you.
The Service and Websites may provide (1) information and content provided by third parties; (2) links to third-party websites or resources, such as sellers of goods and services; and (3) third-party products and services for sale directly to you. Confirm is not responsible for the availability of such external sites or resources, and does not endorse and is not responsible or liable for (i) any content, advertising, products, or other materials on or available from such sites or resources, (ii) any errors or omissions in these websites or resources, or (iii) any information handling practices or other business practices of the operators of such sites or resources. You further acknowledge and agree that Confirm shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with use of or reliance on any linked sites or resources. Your interactions with such third parties will be governed by the third parties’ own terms of service and privacy policies, and any other similar terms.
Confirm reserves the right at any time to modify or discontinue, temporarily or permanently, the Service and Websites (or any part thereof), with or without notice. You agree that Confirm shall not be liable to you or any third party for any modification, suspension or discontinuance of the Service and Websites.
PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS, INCLUDING YOUR RIGHT TO FILE A LAWSUIT IN COURT.
12.1 Application. You and Confirm agree that these Terms affect interstate commerce and that the Federal Arbitration Act governs the interpretation and enforcement of these arbitration provisions. This Section 12 is intended to be interpreted broadly and governs any and all disputes between us including but not limited to claims arising out of or relating to any aspect of the relationship between us, whether based in contract, tort, statute, fraud, misrepresentation or any other legal theory; claims that arose before these Terms or any prior agreement (including, but not limited to, claims related to advertising); and claims that may arise after the termination of these Terms. The only disputes excluded from this broad prohibition are the litigation of certain intellectual property and small court claims, as provided below.
12.2. Initial Dispute Resolution. Most disputes can be resolved without resort to arbitration. If you have any dispute with us, you agree that before taking any formal action, you will contact us at [email protected] and provide a brief, written description of the dispute and your contact information (including your username, if your dispute relates to an account). Except for intellectual property and small claims court claims, the parties agree to use their best efforts to settle any dispute, claim, question, or disagreement directly through consultation with Confirm, and good faith negotiations shall be a condition to either party initiating a lawsuit or arbitration.
12.3 Binding Arbitration. If the parties do not reach an agreed-upon solution within a period of thirty (30) days from the time informal dispute resolution is initiated under the Initial Dispute Resolution provision above, then either party may initiate binding arbitration as the sole means to resolve claims, (except as provided in section 12.7 below) subject to the terms set forth below. Specifically, all claims arising out of or relating to these Terms (including the Terms’ formation, performance, and breach), the parties’ relationship with each other, and/or your use of Confirm shall be finally settled by binding arbitration administered by the JAMS Comprehensive Arbitration Rules & Procedures (“JAMS”). The JAMS rules will govern payment of all arbitration fees. Confirm will pay all arbitration fees for claims less than $75,000. If you receive an arbitration award that is more favorable than any offer we make to resolve the claim, we will pay you $1,000 in addition to the award. Confirm will not seek its attorneys’ fees and costs in arbitration unless the arbitrator determines that your claim is frivolous.
12.4 Arbitrator’s Powers. The arbitrator, and not any federal, state, or local court or agency, shall have exclusive authority to resolve all disputes arising out of or relating to the interpretation, applicability, enforceability, or formation of these Terms including but not limited to any claim that all or any part of these Terms is void or voidable, whether a claim is subject to arbitration, or the question of waiver by litigation conduct. The arbitrator shall be empowered to grant whatever relief would be available in a court under law or in equity. The arbitrator’s award shall be written and shall be binding on the parties and may be entered as a judgment in any court of competent jurisdiction.
12.5 Filing a Demand. To start an arbitration, you must do the following: (a) Write a Demand for Arbitration (“Demand”) that (i) briefly explains the dispute, (ii) lists your and Confirm’s names and addresses, (iii) specify the amount of money in dispute, if applicable, (iv) identify the requested location for a hearing if an in-person hearing is requested, and (v) state what you want in the dispute; (b) send one copy of the Demand to JAMS, along with a copy of these Terms and the filing fee required by JAMS; and (c) Send one copy of the Demand for Arbitration to us at [email protected].
The parties understand that, absent this mandatory arbitration provision, they would have the right to sue in court and have a jury trial. They further understand that, in some instances, the costs of arbitration could exceed the costs of litigation and the right to discovery may be more limited in arbitration than in court. If you are a resident of the United States, arbitration may take place in the county where you reside at the time of filing, unless you and we both agree to another location or telephonic arbitration. For individuals residing outside the United States, arbitration shall be initiated in San Francisco County, California, United States, and you and Confirm agree to submit to the personal jurisdiction of any federal or state court in San Francisco County, California, United States, in order to compel arbitration, stay proceedings pending arbitration, or to confirm, modify, vacate, or enter judgment on the award entered by the arbitrator.
12.6 Class Action Waiver. The parties further agree that the arbitration shall be conducted in the party’s respective individual capacities only and not as a class action or other representative action, and the parties expressly waive their right to file a class action or seek relief on a class basis. YOU AND CONFIRM AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING. If any court or arbitrator determines that the class action waiver set forth in this paragraph is void or unenforceable for any reason or that an arbitration can proceed on a class basis, then the arbitration provisions set forth above shall be deemed null and void in their entirety and the parties shall be deemed to have not agreed to arbitrate disputes.
12.7 Exception: Litigation of Intellectual Property and Small Claims Court Claims. Notwithstanding the parties’ decision to resolve all disputes through arbitration, either party may bring enforcement actions, validity determinations or claims arising from or relating to theft, piracy or unauthorized use of intellectual property in state or federal court with jurisdiction or in the U.S. Patent and Trademark Office to protect its intellectual property rights (“intellectual property rights” means patents, copyrights, moral rights, trademarks, and trade secrets, but not privacy or publicity rights). Either party may also seek relief in small claims court in San Francisco, California for disputes or claims within the scope of that court’s jurisdiction.
12.8 30-Day Right to Opt Out. You have the right to opt out and not be bound by the arbitration and class action waiver provisions set forth above by sending written notice of your decision to opt out to [email protected] with the subject line, “ARBITRATION AND CLASS ACTION WAIVER OPT-OUT.” The notice must be sent within the later of 30 days of your first use of the Service or within 30 days of changes to this section being announced on the Site. Otherwise you shall be bound to arbitrate disputes in accordance with the terms of these paragraphs. If you opt out of these arbitration provisions, Confirm also will not be bound by them.
12.9 Changes to This Section. Confirm will provide thirty (30) days’ notice of any changes to this section by posting on the Service and Websites. Amendments will become effective thirty (30) days after they are posted on the Service and Websites or sent to you by email. Changes to this section will otherwise apply prospectively only to claims arising after the thirtieth (30th) day. If a court or arbitrator decides that this subsection on “Changes to This Section” is not enforceable or valid, then this subsection shall be severed from the section entitled Mandatory Arbitration and Class Action Waiver, and the court or arbitrator shall apply the first Mandatory Arbitration and Class Action Waiver section in existence after you began using the Service and Websites.
12.10 Survival. This Mandatory Arbitration and Class Action Waiver section shall survive any termination of your use of the Service and Websites.
These Terms shall be construed in accordance with and governed by the laws of California notwithstanding its conflicts of law principles. Any dispute arising out of these terms and conditions or the use of this site shall be initiated and conducted in the state or federal courts of San Francisco County, California, and you and Confirm consent to the exclusive jurisdiction of such courts.
14.1 Force Majeure. Under no circumstances shall Confirm or its licensor or supplier be held liable for any delay or failure in performance resulting directly or indirectly from an event beyond its reasonable control.
14.2 No Waiver. No waiver of any provision of these Terms will be binding unless in writing, no waiver of any provisions of these Terms will be deemed a further or continuing waiver of such provision or any other provision, and the failure of Confirm to exercise or enforce any right or remedy in these Terms does not waive that right or remedy. If an arbitrator or a court of competent jurisdiction finds any provision of these Terms to be invalid, the parties agree that the court should endeavor to give effect, to the maximum extent permitted by law, to the parties’ intentions as reflected in the provision, and the other provisions of these Terms will remain in full force and effect.
14.3 Third-Party Beneficiaries. You agree that, except as otherwise expressly provided in these Terms, there shall be no third-party beneficiaries to these Terms.
14.4 Statute of Limitations. Except for residents of New Jersey, you agree that regardless of any statute or law to the contrary, any claim or cause of action arising out of or related to the use of the Service and Websites and/or these Terms must be filed within one (1) year after such claim or cause of action arose or be forever barred.
14.5 Miscellaneous. These Terms (and all terms and conditions incorporated herein) constitute the entire agreement between you and Confirm and govern your use of the Service and Websites, and supersede any prior agreements between you and Confirm on the subject matter. These Terms, and any rights or licenses granted hereunder, may not be assigned or delegated by you. These Terms, and any rights or licenses granted hereunder, may be assigned or delegated by Confirm without restriction. These Terms bind and inure to the benefit of each party and the party’s successors and permitted assigns. These Terms may not be modified by an oral statement by a representative of Confirm. No agency, partnership, joint venture or employee-employer relationship is intended or created by these Terms. You agree that any agreements made by and between you and us in electronic form are as legally binding as if made in physical written form. If you are using the Service and Websites for or on behalf of the U.S. government, your license rights do not exceed those granted to non-government consumers. The section titles in these Terms are for convenience only and have no legal or contractual effect. Any provision of these Terms that by its nature is reasonably intended to survive beyond termination of these Terms shall survive.
14.6 Notices. We may deliver notice to you by e-mail, posting a notice on the Service and Websites or any other method we choose and such notice will be effective on dispatch. If you give notice to us, it will be effective when received and you must use the following physical or email address: (1) Confirm, Inc., 320 Alabama St #1, San Francisco, CA 94110; or (2) [email protected].
If you have any questions about these Terms, please contact us at [email protected].
Last Updated: August 23, 2021
Confirm and its affiliates engage third-party subprocessors and Confirm affiliates to help us provide services to our customers. A subprocessor is a third-party processor engaged by Confirm or in some cases, an Confirm affiliate, who receives data from Confirm and processes personal data on behalf of our customers.
As a condition of permitting a subprocessor to process personal data, Confirm (and its affiliates as applicable) will enter into a written agreement with each subprocessor containing data protection obligations at least as protective as the technical and organizational measures Confirm has put into place to protect customer personal data from accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access.
Please subscribe below to receive notifications of subprocessor changes.
|Entity Name||Subprocessing Activity||Entity Country|
|Amazon Web Services, Inc.||Cloud Service Provider||United States|
|The Rocket Science Group (Mailchimp)||Email Processing||United States|
|Intercom, Inc.||Cloud Customer Support||United States|
Confirm is committed to protecting and honoring your privacy rights. In light of a number of jurisdictions having enacted laws that affect how companies handle personal information, we wanted to take a moment to share what measures Confirm has put into place to comply with two significant data protection laws: the General Data Protection Regulation and the California Consumer Privacy Act.
The GDPR is a European law establishing protections for the personal data of EU residents that came into force on May 25, 2018. Under the GDPR, organizations that collect, maintain, use, or otherwise process EU residents’ personal data (regardless of the organization’s location) must implement certain privacy and security safeguards for that data. Confirm has established a comprehensive GDPR compliance program and is committed to partnering with its customers and vendors on GDPR compliance efforts. Some significant steps Confirm has taken to align its practices with the GDPR include:
Below, we provide additional details about the core areas of Confirm’s GDPR compliance program and how customers can use Confirm to support their own GDPR compliance initiatives.
Under the GDPR, “data controllers” (i.e. entities that determine the purposes and means of processing data) are required to enter into agreements with other entities that process data on their behalf (called “data processors”).
EU data protection laws require organizations to use a recognized legal mechanism to transfer data from the EU to countries that do not have a similar data protection framework, including the United States.
Although we cannot rely on Privacy Shield to transfer EEA and Swiss data, Confirm has decided to keep its Privacy Shield certification to continue to safeguard the data already transferred under Privacy Shield and as a commitment to its data protection safeguards.
The regulatory guidance in this area continues to evolve, and we are tracking additional guidance from data protection authorities closely. Confirm remains committed to the privacy of our customers and will continue to work to make sure we comply with data protection laws.
The GDPR requires organizations to use appropriate technical and organizational measures to protect the security, confidentiality, and integrity of personal data. Security continues to be a priority for Confirm, and we have successfully completed our SOC 2 (Type I) and (Type II) audits for controls relevant to security, availability, and confidentiality. This means that an independent third party has both validated our processes and practices with respect to these three trust services criteria and confirmed our ability to maintain compliance with the controls we have implemented. We have likewise implemented a variety of safeguards to protect the security of our platform, including encrypting web connections to protect data transmissions, replicating our databases to support reliability of the platform, and controlling access to our facilities and office network. Confirm also offers customers the ability to use additional security controls to further enhance the security of their teams’ data.
If you would like to exercise your rights under the GDPR, please submit your request by contacting us at [email protected].
The CCPA, which comes into force on January 1, 2020, is a law that provides California consumers certain rights with respect to their personal information. Specifically, the law requires that businesses subject to the statute grant consumers the ability to request access to and deletion of their data, and the ability to opt out of “sales” of their personal information. The law also restricts how service providers that process personal information on behalf of a business may use that information.
Confirm does not sell its customers’ or users’ personal information. Where a business subject to the CCPA has entered into a services or subscription agreement with Confirm, Confirm will also act as a service provider to that business. Specifically, Confirm will process such customers’ personal information only for the purposes set forth in the applicable agreement, and will cooperate with customers to fulfill deletion or access requests.
If you would like to exercise any of your rights under California law with respect to your personal information, please submit your request by contacting us at [email protected].
Both the GDPR and CCPA’s requirements are comprehensive, but the law and regulatory guidance continues to evolve when it comes to privacy and data protection – and not just in the EU or the United States. As data protection authorities and regulators interpret and issue guidance on the GDPR, CCPA, and other currently existing data protection laws around the world and as countries pass new data protection laws, we will continue to follow these developments closely and evaluate our program for any changes or enhancements as needed.
Finally, we value communication with our customers. If you have any questions about our data protection practices, please contact us at [email protected].