Privacy, GDPR and penetration tests

[Alessandra_Saviotti (Alessandra)]

hello team,
A client of ours is asking for:

• a Data Protection Impact Assessments (Data Protection Impact Assessment (DPIA) - GDPR.eu) or a document on the security of our application developed on backendless

• results of penetration tests

we of course have already redirected them to your documentation about GDPR, explained how we implement role based access, etc. - but we are unable to move forward without this information or documents

would you be able to help us out or point us in the right direction?

thank you

[oleg-vyalyh]

Hi.
Here are a couple of the topics with almost the same question.
I think they will be helpful.

GDPR compliance documentation

Here in the EU GDPR (General Data Protection Regulation) coming into effect in May this year. Is Backendless compliant with this, and where can I find the documentation?

GDPR and Backendless Cloud

Hi, I just want to confirm something. I found this post from April 2018, that says Backendless Cloud plans do not guarantee compliance: Later on, in August 2018, this post says Backendless is compliant. Does that mean that cloud plans are now hosted in the EU and are GDPR compliant? I assume by storage that includes the Data and Files services?

[Alessandra_Saviotti (Alessandra)]

thank you Oleg, I am familiar with these posts.

I would still need to provide documents, such as results of penetration tests and / or the impact assessment.

How could I proceed regarding those?

thank you for your help

[oleg-vyalyh]

In other words you ask whether we ordered in some other third party to hack us, and is the results of that process are published somewhere?

[Alessandra_Saviotti (Alessandra)]

correct, or how I can get that information to provide to our client, as otherwise they would not trust the service

[mark-piller]

Hello,

You are welcome to hire your own auditor to perform penetration tests.

Regards,
Mark

[Alessandra_Saviotti (Alessandra)]

got it, thank you Mark