Security

Safeguard Your Workplace with Confidence

We prioritize your company’s data security, protect your employees' and visitors' privacy, and ensure compliance with industry standards—empowering a safe and seamless workplace.

FAQs

Data

How does Gable handle data storage and security?

Gable stores all customer and employee data in a secure, cloud-based environment with robust physical and network safeguards. Our platform employs strict access controls, continuous monitoring, and industry-standard encryption to protect against unauthorized access, ensuring data integrity and confidentiality at all times.

What encryption methods does Gable use for data at rest and in transit?

We use AES-256 encryption to secure data at rest in our databases and storage systems, which is widely recognized as one of the strongest encryption standards available. For data in transit, we enforce TLS 1.2+ protocols to safeguard information traveling between our servers and users, preventing interception or tampering.

What are Gable’s data retention policies, and how do you ensure compliance? How is data securely disposed of when it reaches the end of its retention period?

Gable retains data only as long as necessary to fulfill business and compliance requirements, adhering to regulations like GDPR and CCPA. Once data is no longer required, we use secure deletion and cryptographic wiping processes that permanently remove all traces of information, aligning with industry best practices and legal obligations.

What security standards and compliance checks does Gable require from third-party integrations? How is data shared with third parties protected and handled securely?

We evaluate all third-party vendors against recognized standards like SOC 2, ISO 27001, and PCI-DSS (as applicable), ensuring they meet or exceed our security requirements. Any data shared is transferred via secure, encrypted channels, and we limit access to the minimum necessary while enforcing strict contractual obligations around data handling.

How does Gable support SSO integrations, MFA, and access control policies for data security?

Gable supports SSO through established protocols like SAML and OpenID Connect, enabling seamless user authentication with centralized identity providers. We also provide granular role-based access controls, ensuring that only authorized personnel can access sensitive data and system features.

Privacy

How does Gable ensure compliance with global regulations like GDPR, CCPA, and SOC 2 for employee data protection?

We maintain a rigorous privacy-by-design and security-by-design approach throughout our product lifecycle, implementing measures such as data minimization, audit trails, and strict access controls. Regular internal and external audits help us uphold global regulatory standards, while continuous monitoring ensures ongoing compliance.

How does Gable collect, use, and retain employee data in compliance with privacy laws?

Gable collects only the data necessary for legitimate business purposes, clearly disclosing our practices via privacy notices and DPA agreement. We store this information in encrypted, access-controlled systems and retain it based on applicable legal requirements, securely disposing of it when no longer needed.

How does Gable securely manage visitor information and ensure that access is restricted to authorized admins only?

Visitor information is segregated from other datasets and protected using role-based access controls, which allow only authorized administrators to view records. Additionally, we apply stringent logging and monitoring to detect unauthorized attempts, ensuring visitor data remains confidential and secure.

Other

How does Gable identify, assess, and mitigate platform vulnerabilities and security risks?

We conduct regular vulnerability assessments, penetration tests, and code reviews to identify potential weaknesses. Our dedicated security team employs a risk-based approach to promptly address findings, deploying patches and enhancements as needed to keep the platform resilient against emerging threats.

What is Gable’s uptime commitment, and where can I find uptime statistics?

We strive for high availability with a typical commitment of 99.7% uptime. For more information see here.

How does Gable ensure code quality and security in its development process?

Developers at Gable follow secure coding standards, conduct peer reviews, and utilize automated testing tools during the software development lifecycle. We regularly scan for common vulnerabilities and enforce a rigorous quality assurance process that includes staging environment tests and security checks before deployment.

Does Gable store credit card data?

For payment transactions, Gable partners with Stripe, PCI-compliant third-party payment provider, and does not store credit card information on our own servers. This approach ensures that all sensitive payment data is handled securely in compliance with industry regulations.

What is Gable’s process in the event of a security breach?

Gable has a formal incident response plan that includes immediate containment, thorough investigation, and swift notification to impacted parties and relevant authorities, where required. We conduct root cause analyses to remediate vulnerabilities, communicate transparently with affected users, and implement preventive measures to mitigate future risk.

How does Gable ensure redundancy and backups for immediate recovery?

We maintain redundant server clusters and automated backups stored across geographically separate data centers to guard against localized failures. Continuous replication and routine disaster recovery drills ensure we can quickly restore services or data, minimizing downtime and preserving business continuity in the event of an unexpected disruption.

How does Gable maintain comprehensive and transparent audit logs for security and compliance?

All critical system events, user actions, and access records are captured in detailed audit logs that Gable stores securely and retains for compliance purposes. We apply strict internal controls to these logs, limiting access to authorized security personnel only, and regularly review them for signs of suspicious activity or compliance anomalies.

Safeguard Your Workplace with Confidence

Data security

Privacy & compliance

Access Management

Protecting Your Data and Privacy

Gable Subprocessors

FAQs

Data

Privacy

Other

Connect with a Gable expert today!

Get Started

Product

NEWS

Download our app