Data Protection and Security

General Data Protection Regulation (GDPR)

GDPR is an Europe lead Data Protection regulation that requires Tandem to protect user data that we collect to serve the user with our service - which enables video, audio, screenshare hybrid and remote work. Tandem is committed to and is fully compliant with this data protection regulation.

Tandem has always had a strong focus on protecting any data we collect and process. As a US owned and operated business we are hosted in multiple geographies worldwide including Europe, and we adhere to the General Data Protection Regulation (GDPR) laws for each region.

Specifically here are key aspects of our system that are designed to protect user data:

• Tandem is fully distributed. Specifically users from each region in the world, eg Europe, are routed to the local cluster (eg Europe West) that is fully contained with respect to routing, data storage and web pages.
• Tandem stores customer data including names, email addresses and optionally profile photos for the duration of the Tandem chat service.
• Email is the only communication handle collected by Tandem and used to provide login notifications
• From time to time Tandem sends out offers for Tandem products, we don’t share with any other companies your email data. These emails are sent to our subscribers with an Unsubscribe link - which adheres to GDPR rules.
• Payments made in the local cluster are stored in 3rd party PCI compliant servers and are not stored locally.

Compliance in relation to our employees and vendors

Tandem Software LLC, the corporation that owns and operates the Tandem.chat service, is a business located in California and therefore subject to US laws. This entity is fully GDPR compliant.

We have very few external vendors who help us provide our service. We have ensured that our vendors remain compliant when using their services on behalf of our customers and users. If you desire more information on our external vendors, please email us at: [email protected], and we will gladly provide it.

Tandem’s Privacy Policy is outlined here.

Data removal procedure

Once a customer unsubscribes from our service, we automatically purge customer data including names, profile photos, email addresses and recordings/transcriptions. Customers and users can email us at [email protected] to get confirmation that their user data has been removed.

SOC2 Data Security regulation

SOC2 is a standard for managing customer data and related systems, ensuring their security, availability, confidentiality, and integrity. It's a voluntary framework developed by the AICPA (American Institute of Certified Public Accountants) for service organizations. Essentially, it means a company has implemented and is maintaining adequate controls over its information security practices, as demonstrated by an independent audit.