Security

Protecting your data is our first priority

Honestly is ISO 27001 certified, GDPR compliant and hosted in Germany

Book a demo Contact us

Illustration of a person opening a door with a protective shield behind it, representing protected employee data

Certification and data privacy

Audited against the standard - and compliant with GDPR

ISO 27001 certified

Our information security management system is certified to ISO 27001, the international standard for information security. It commits us to assessing risks continuously and improving our controls - our data centres are certified too.
GDPR compliance, anonymity and data masking

Honestly is fully GDPR compliant: privacy by design and by default, a data processing agreement (DPA) at the start of every engagement, and subprocessors your admins see and approve in the account. Results only become visible once enough answers have come in, and personal data in open-ended answers - names, email addresses, phone numbers - is masked automatically.

Join the world's best people first companies

Technically secured

How Honestly protects your data in operation

Resilient operations and documented recovery

Honestly runs in ISO 27001 certified data centres in Europe, in a cloud environment that distributes load automatically. Backups run automatically, and a documented recovery and contingency plan covers incidents.

Illustration of two mirrored dashboards representing resilient operations

Illustration of a letter with a padlock representing secure sign-in

Single sign-on and strong authentication

Honestly provides SSO for all enterprise clients - so your own sign-in policies apply here as well.

Single sign-on (SSO) enables your users to login to Honestly without providing additional personal information and instead use your company's login credentials
SSO runs on SAML 2.0 or Azure AD, so the strong methods of your identity provider - two-factor and multi-factor authentication included - also apply when signing in to Honestly

See enterprise features

Illustration of a person at a dashboard with a data stream representing audit logs and encryption

Auditing, encryption and penetration testing

Honestly provides audit logs for administrator activities and when users access data
We support 256-bit encrypted data at rest and in transit
Steady as a rock: To achieve the highest level of security, Honestly uses independent security companies for regular penetration testing
Users can see their active sign-ins and end any of them at any time