On request, datascalehr provides the third-party attestations and certificates for the Mendix platform, including the SOC 2 Type II and ISO/IEC 27001 reports, together with datascalehr's own...
FAQs
What platform does datascalehr run on, and how is the platform certified?
datascalehr runs entirely on Mendix Cloud, operated by Siemens Industry Software (Mendix) on AWS data centers in Germany and Ireland. The Mendix platform holds SOC 2 Type II and ISAE 3000/3402 Type...
Which data protection laws does datascalehr comply with?
datascalehr complies with GDPR (EU, UK and Swiss) and with applicable US data protection laws, including HIPAA, COPPA, GLBA, FCRA, FERPA and CCPA.
Which sub-processors does datascalehr use for client data?
datascalehr uses two sub-processors. Mendix (Siemens Industry Software) hosts the application in Germany and Ireland. Amazon Web Services provides the SES email gateway and Textract OCR in Ireland....
Who do we contact about a potential data breach?
Report any potential data breach immediately to Luke Zawadzki, VP Engineering and Data Protection Officer, at luke.zawadzki@datascalehr.com.
How does datascalehr handle a data breach?
datascalehr follows a formal breach notification protocol. The datascalehr incident response team, made up of Luke Zawadzki (VP Engineering), Nicolas Delord (CTO) and Jerome Gouvernel (CEO),...
Can other clients learn anything about our payroll data through KMod™?
No. Shared KMod™ holds only abstract, expert-confirmed field relationships, such as "Dept_Code corresponds to Cost_Center", with a confidence score. datascalehr removes the client name, system...
Does datascalehr send payroll or personal data to external AI models?
No. datascalehr sends only header and contextual metadata, such as column names, country and pay frequency, to large language models. Personal Data and data values never leave the datascalehr...
What categories of data does datascalehr’s AI process?
datascalehr's AI works with five categories of data. Personal data (worker, HR and payroll data) is processed by internal algorithms only and is never sent to an LLM or stored in KMod™. Header data...
What is KMod™, and does KMod™ store personal data?
KMod™ is datascalehr's AI-powered knowledge model. KMod™ suggests field mappings between HR systems and payroll systems, and learns from payroll experts who confirm or reject each suggestion. KMod™...
Does datascalehr train its AI on our payroll or personal data?
No. datascalehr's Service learns from the validated decisions of human experts who confirm field relationships. Client Data is processed only to deliver the Service. Every client benefits from the...
How is data destroyed when storage hardware is retired?
datascalehr relies on AWS processes to destroy data on physical media when AWS replaces or recycles devices, following AWS compliance protocols for secure deletion.