Collage HR
Collage HR is an award-winning, all-in-one HRIS that automates your people processes and saves your team hours of manual tasks. Collage HR for Slack allows you to request and approve time off requests directly from Slack, as well as view your recent time off requests.
Permissions
Collage HR will be able to view:
Collage HR will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Collage HR
Company headquarters location
Canada
Terms of service
Privacy & data governance
Data retention policy
Collage HR will retain custom data for as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with customers. We may retain certain data as necessary to prevent fraud or future abuse, or for legitimate business purposes, such as analysis of aggregated, non-personally-identifiable data, account recovery, or if required by law. All retained personal information will remain subject to the terms of our Privacy Policy. If customers request that your name be removed from our databases, it may not be possible to completely delete all your Personal Information due to technological and legal constraints.
Collage does not have any ownership rights over customer data. We will not disclose, trade, rent, sell or otherwise transfer personal information, without consent.
Data archiving and removal policy
Customers can request deletion by emailing info@collage.co, as described in our Privacy Policy. Once we receive and confirm a deletion request, we will delete (and direct our service providers to delete) customer data from our records, unless an exception applies. We may deny a deletion request if retaining the information is necessary for us or our service providers to:
1) Complete a transaction for which we collected the personal information, provide a good or service that customers requested, take actions reasonably anticipated within the context of our ongoing business relationship with a customer, or otherwise perform our contract with a customer.
2) Comply with a legal obligation.
Data storage policy
Collage HR will store customer data in data centres located in Canada. As we understand that data security is a critical issue for our customers and we are committed to safeguarding the personal information in our custody and under our control. We have implemented reasonable administrative, technical and physical safeguards in an effort to protect against unauthorized access, use, modification and disclosure of personal information in our custody and control.
Collage’s physical infrastructure is hosted and managed within Amazon’s secure Canadian data centres and utilize the Amazon Web Service (AWS) technology. Amazon continually manages risk and undergoes recurring assessments to ensure compliance with industry standards. Amazon’s data centre operations have been accredited under:
• ISO 27001
• SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)
• PCI Level 1
• FISMA Moderate
• Sarbanes-Oxley (SOX)
For additional information see: https://aws.amazon.com/security
Data center location(s)
Canada
Data hosting details
Cloud-hosted
Data hosting company
AWS
App/service has sub-processors
no
Certifications & compliance
Data deletion request procedure
When an administrator requests CollageHR delete their company's data, we delete anything we are not mandated to retain by PIPEDA, PHIPPA, and provincial tax laws.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
no
Contact for security issues
support@collage.co
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no