Culture Amp
Culture Amp is the leading People & Culture Platform helping companies take action to improve employee engagement, retention and performance.Note: to use the Culture Amp app, you must be a Culture Amp customer. If you are interested in becoming a customer, contact us at [email protected].Receive notificationsAcross Engagement and Effectiveness surveys, as well as the Performance cycle process, expect to receive invitations, friendly reminders, and announcements.Give, receive and request feedback (Performance customers only)High-performing teams thrive on giving and receiving regular feedback. With the Culture Amp app you can send and receive feedback right from within Slack, and have it automatically stored in the Culture Amp platform alongside your other performance information.Learn more about the Culture Amp app at: cultureamp.com/slackIf you need help, our Product Support team is here to help: https://support.cultureamp.com/hc/en-us/articles/205185165-Contact-our-Product-Support-team
Find out more about Culture Amp at: cultureamp.com
Find out more about Culture Amp at: cultureamp.com
Permissions
Culture Amp will be able to view:
Culture Amp will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Culture Amp Pty Ltd
Company headquarters location
Australia
Terms of service
Privacy & data governance
Data retention policy
Culture Amp shall retain data as long as the company has a need for its use, or to meet regulatory or contractual requirements. Once data is no longer needed, it shall be securely disposed of. Data owners, in consultation with legal counsel, may determine retention periods for their data.
Data archiving and removal policy
By default, a customer’s data is stored for the duration of his or her contract with Culture Amp. The data may be deleted within one month after the contract ends, at the latest, with the exception of data that is required to establish proof of a right or a contract, which will be stored for the duration provided by enforceable law. Once deleted, a user’s data cannot be restored. Culture Amp may provide the option for customers to delete data after their subscription ends. This request must be made by the customer, and Culture Amp may require additional ID verification. Culture Amp should hard delete all information from currently-running production systems within one month of the deletion request.
Data storage policy
All data is encrypted at rest using full disk encryption AES 256, and in transit using TLS 1.2 and above.
Data is classified with all sensitive data labeled as restricted or confidential.
As such, all access to the production environment is given on a need-to-know basis. Access is via encrypted VPN with strong MFA. All access is monitored and logged with active alerting where required.
Data center location(s)
United States, Ireland
Data hosting details
Cloud-hosted.
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
Data deletion request procedure
Culture Amp requires a written request for deletion from all customers. A request must be submitted to the Culture Amp Data Privacy Officer at [email protected].
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2022-06-20
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Please see the Culture Amp support pages for information on SSO: https://support.cultureamp.com/hc/en-us/articles/205198255-Single-sign-on
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
no
Contact for security issues
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
no
Third party services used by this app
Please see the Culture Amp website for a list of our sub processors: https://www.cultureamp.com/sub-processors
Uses token rotation
no