Skip to content

Our position on GDPR

Compliant in-product: data-subject access, export, erasure and rectification; granular, affirmative consent; defined retention windows; 72-hour breach notification. Our DPA is published at os.thequantumclub.com/legal/dpa.

Last updated Last reviewed Questions trust@thequantumclub.com

At a glance

State
LiveImplemented and in effect now.
Scope
Processing of personal data across the Club OS platform and its supporting EU infrastructure, for all customer and candidate data.

The framework

What GDPR is

The EU General Data Protection Regulation governs how personal data of people in the EU/EEA is collected, processed, stored and transferred.

In place5

  • Self-service access, export, erasure and rectification from in-app privacy settings.Questionnaire PDR-01, in the security questionnaire· Yes
  • Granular, affirmative consent (meeting recording splits video / audio / transcription).
  • Defined retention windows per data type; deletion-on-request honoured.
  • A Data Processing Agreement with SCCs is available to every customer.
  • 72-hour personal-data breach notification (Art. 33/34).Questionnaire RES-02, in the security questionnaire· Yes

Not yet1

  • Sub-processors reviewed; a GDPR-compliant DPA is in place with 6 of 9. For the other 3 (LiveKit, Deepgram, AWS S3) it is being confirmed.Questionnaire GRC-04, in the security questionnaire· Partial

Security architecture

2 controls that map to GDPR

Grouped as on the Security page, where each control is described. The note under each names any other framework it supports.

Data protection 2

What each control does

What you'll receive

What you can rely on, and when

Available now
Our current controls, listed above, plus this Trust Center page. No NDA required.
Open the documents