Data security, GDPR & compliance

Insightly’s security posture, GDPR obligations, guidance for regulated industries, and data backup.

On this page:

• Security standards
• GDPR
• Regulated industries
• Backing up your data

Security standards

The live Data Security article lists the standards Insightly states it meets, covering personal information collection, use, and retention. It also states that databases are backed up daily and stored encrypted off-site for disaster recovery.

GDPR

GDPR is an EU regulation expanding protection of EU citizens’ personal data, and correspondingly expanding the obligations of organizations collecting or processing it. See also the data deletion and anonymization procedures under Deleting Data & Privacy.

Regulated industries

The live guidance states that Insightly is not designed to be compliant with the rules governing regulated industries, naming Sarbanes-Oxley and GLBA, and cannot be customized to ensure such compliance. Customers are directed to understand the regulations affecting their own business.

Backing up your data

Insightly backs up its databases daily for its own disaster recovery, but does not provide individual customer backup or data restoration as a service. Customers needing their own backups should plan accordingly.