nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

GDPR - Storing data on Trello.

George Fryer

Hi all,

Does anyone know what Trello's regulations are regarding storing data?

In short, we want to look at using Trello as a replacement on Excel, and be able to store bloggers details on here, but with the upcoming GDPR, we want to make sure that this is okay.

Reference: https://ico.org.uk/for-organisations/resources-and-support/data-protection-self-assessment/getting-ready-for-the-gdpr/

Thank you for your help.

George

Accepted answers

All comments

Marta Galofre de Alos

Hi George,

Marta here, from Trello Support.

We definitely want to make sure that you’re comfortable with our data policies. The most comprehensive overview of our security policies and procedures (covering things like how we back up our data, what servers we use, and how we encrypt information) can be found here: https://trello.com/trello-operations-and-security-guide.pdf

Though intended for our Business Class users, the info in that document which covers our overall data practices is applicable to all Trello users.

We’d recommend reviewing that file or passing it on to the person managing security policy for your company—typically, it’s a great starting point and often will answer all of the questions that users have about our security.

Additionally, you can find our privacy policy at https://trello.com/privacy and our Terms of Service at https://trello.com/legal. They have more information about how Trello uses and doesn’t use your data.

I hope that helps!

Cheers,

Marta

rcole

Hi Marta,

I think you aren't quite understanding the question here. GDPR is a new data privacy regulation in effect in the EU. It requires that all data about EU citizens be stored on servers physically within the EU, and that it be possible to completely purge all user records if needed.

I think that trello would need to offer an option for what datacenter to create a board in for instance.

This also means things like soft deletes and data backups are subject to extended requirements.

It's not just company data policy, it's a regulatory level regulation with ultra-high penalties for non-compliance...

Does trello know about this?

Siobhan McKeown

We are also need to know about Trello's GDPR compliance. We have Trello business class and use it across the company, and need to know if we can continue to use it after GDPR is in force in May.

Marta Galofre de Alos

Hi Ryan, Siobhan,

Thanks for your reply and sorry for the confusion.

We are aware of GDPR and have a compliance plan to put in place ahead of the May '18 deadline, though we're not ready to share that yet. We will not be hosting data in the UK or EU at that time. At this point, all of our data is stored on Amazon's AWS Infrastructure in US regions.

If you have further questions about this, don't hesitate to reach out to us at trello.com/contact.

Cheers,

Marta

Stef Elliott

Hi,

I believe that there are two components to this question.

1) Trello acting as a Data Controller for data e.g. my login data to the platform

2) Trello acting as a Data Processor for my company (as the Data Controller) where I am at risk of processing Personal Data by how I use the platform and data entered or uploaded.

Trellos's responsibility here is to ensure suitable Info security etc but what I put into the platform, access to it and how its used is mine.

One thing I noted is that the Privacy Shield link above and in the privacy policy is that the link at time of posting is incorrect.

It should be https://www.privacyshield.gov/participant?id=a2zt00000008RdQAAU&status=Active

Cheers

Stef

Bjørn Tore Hansen

On a side note: I thought the mail Trello sent on changes in their privacy policy in april was pretty good:

‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌

Trello Privacy Policy Updates

Thank you for trusting us with your personal information—we know it’s a wild web out there and we value your choice to rely on Trello for your projects, goals, and teamwork. We are working hard to continue to earn your trust, and that’s why we want to tell you about some new changes to our privacy policy.

As you may have heard from your other favorite apps, new data protection laws are being launched all over the world (including GDPR in Europe). To keep pace with these new laws, Trello, in collaboration with our new parent company, Atlassian, is updating its privacy policy effective May 25, 2018. The new policy includes legal updates, is easier to read and navigate, and explains how we work together with Atlassian services and offerings in sharing data to improve your experience. You can take a look at the revised privacy policy here.

Here are some of the changes we are making to the privacy policy:

Improved navigation and more user-friendly language. We’ve reformatted our policy with clearer language, headings, and links that allow you to find important information more easily. Where we can, we’ve added examples that illustrate our activities.
More details on how we integrate our products and share information. We are always working to improve our products, and the updates to our policy describe ways we’ve made our products more personalized, smarter, and more integrated with other products that you may use. The revised policy also explains how and why Atlassian and Trello share data.
More control over your information. We are making it easier for you to control the information you provide us. Our policy explains how you can make choices about your information and the measures we’ve put in place to keep your information secure.
Trello at work. You may have added an email address to your Trello account that is managed by a third party organization, like your employer. We have explained our relationship to these kinds of accounts, the tools available to managed account administrators, and the admin ability to claim and control accounts connected to managed email domains.

We look forward to continuing to be a part of your productivity. If you have any questions about our privacy policy, please reach out to our friendly support team by visiting help.trello.com.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Unanswered
Groups
Help

Find more posts tagged with

trello