Is Passwd GDPR2 and SOC2 compliant?

Passwd is GDPR and SOC2 by design

Passwd prioritizes your data privacy and security, especially when it comes to managing sensitive information like passwords. Our solution is designed with GDPR compliance in mind.

Here’s how we ensure your data stays secure and under your control.

No data processing by us

Unlike typical password managers, we don’t handle your data. Our role is to help you install and configure the team password manager on your Google Cloud setup. After that, you’re in complete control - meaning we have zero access to your data, minimizing any risk of unauthorized access.

You are in control

Our password manager runs directly within your Google Cloud, giving you total control over your data. You decide where it’s stored, ensuring compliance with GDPR's data residency rules. Google Cloud itself is GDPR-compliant, and you can choose data centers within the European Economic Area (EEA) or elsewhere, depending on your needs.

Strong security measures

We take security seriously. We encrypt data in transit and at rest, have strong access controls and regular security audits. We even participate in a bug bounty program to continuously improve security, protecting your data from potential threats.

Management tools

You remain in control with our password manager’s tools for data management. Whether it’s importing, exporting, or deleting data, these features support your GDPR rights.

Transparency and Compliance

We’re committed to transparency. Our role is clearly defined - we assist with setup, but you manage your data. We aim for no confusion, keeping you fully informed about how your data is protected under GDPR.

Passwd is not just a secure password manager; you’re getting peace of mind knowing your data is safe, private, and fully compliant with GDPR.