SECURITY AND PRIVACY

People data,
handled with care.

Feedback is personal information. Here we explain what we protect, how we do it and what we do not have yet, so your security team can evaluate us without guessing.

HOW WE DO IT

What is implemented today

01

Where data lives

Data lives in a managed PostgreSQL database on cloud infrastructure in the United States. The application runs on a hosting platform with no servers of our own to maintain.

02

Encryption

Connections use TLS. The database encrypts data at rest with AES-256, provided by the infrastructure. Integration credentials are also encrypted inside the application.

03

Role-based access

There are five roles: collaborator, leader, HRBP, administrator and superadmin. Permissions are enforced on the server. Only people registered by their organization can sign in, through an external identity provider.

04

AI

Analysis uses an external language model provider in the United States, through its API. Under that provider's terms, data sent through the API is not used to train its models. LetsFeedback does not train models on your data either. AI suggests and people decide.

05

Providers

We work with providers for database, hosting, authentication, AI, transactional email, error and uptime monitoring, and billing. Details are in the privacy policy.

06

Secure development

Every change goes through static code analysis and dependency review, and production releases require passing automated tests.

PLAINLY

What we say up front

Certifications

LetsFeedback does not hold its own certifications, such as SOC 2 or ISO 27001. Our main infrastructure providers are audited against standards of that kind.

Legal framework

We take Argentina's Law 25.326 as our framework and GDPR as a reference. This is not a certification.

FIDBY

It asks for consent before sharing anything. The leader receives a summary the person validates, never the full conversation. Urgent cases go to the human contact each organization defines.

Your data

Audit logs are kept for 90 days by default. Exporting and deleting your organization's data is requested by email.

Read the privacy policy →

QUESTIONS

Does your security team need more detail?

Write to us and we will reply. For privacy and personal data topics: privacidad@letsfeedback.com.ar. For security incidents: support@letsfeedback.com.ar.

Write to privacy→