Stape hosts and processes whatever data you send to the server. Our clients are data controllers who determine the purposes and means of processing personal data.

Clients define themselves the scope of user databases and the scope of personal data those databases comprise. In other words, our clients are solely responsible for what personal data they submit to us, and we store only the personal data of users that our clients submit to us.

Stape undergos scheduled audits, that is confirmed by the received certificates: HIPAA, ISO27001. Based on the above certificates, Stape has rights proceeding all types of data. The above-mentioned information is public; you can investigate it by link following: https://app.vanta.com/stape/trust/q4enx4q7gch43uflljd8 

Please follow our DPA for more information.