Privileged Access Management
Customer Trust Portal
At Heimdal, we are committed to transparency and safeguarding your trust. This portal provides comprehensive information on our Corporate Compliance, GDPR and Privacy practices, Information Security standards, as well as access to our End User License Agreement (EULA) and Privacy Policy.
Explore our dedication to ensuring your data and privacy are protected every step of the way.
Corporate Compliance at Heimdal
Compliance at Heimdal refers to fulfilling both mandatory obligations and voluntarily adopted principles that guide our operations. These include compliance with legal requirements as well as internal standards that reflect our commitment to ethical practices and responsible governance.
At the core of Heimdal's Compliance Culture is our Code of Conduct which sets forth the behavioral guidelines expected of all employees, managers, and partners across the Heimdal Group. In this regard, everyone connected to Heimdal is expected to adhere to this Code, along with all other internal policies and procedures.
Additionally, Heimdal upholds several other corporate principles, including:
- Integrity and Fairness: We are committed to conducting business with integrity and fairness, ensuring that all decisions and actions align with our ethical standards.
- Accountability: We are committed to conducting business with integrity and fairness, ensuring that all decisions and actions align with our ethical standards.
- Respect for International Laws and Sanction: We are committed to conducting business with integrity and fairness, ensuring that all decisions and actions align with our ethical standards.
By adhering to these principles and guidelines, Heimdal fosters a culture of trust, transparency, and compliance that underpins every aspect of our business.
DOWNLOAD
Heimdal Code of Conduct on International Sanctions
Heimdal Security has issued this Code of Conduct to guide Business Partners—including contractors, affiliates, and customers—on complying with sanctions, embargoes, and restricted industries, helping them avoid breaches and make decisions aligned with the company’s policies.
Read It
GDPR and Privacy Compliance at Heimdal
At Heimdal, safeguarding personal data is a priority. We are fully committed to ensuring that all personal information we collect, process, and store is handled with the utmost care, in strict compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
- Data Protection by Design and Default: At Heimdal, safeguarding personal data is a priority. We are fully committed to ensuring that all personal information we collect, process, and store is handled with the utmost care, in strict compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
- Transparency and Fairness: Heimdal is committed to providing clear and concise information to all data subjects about how their data is collected, used, and stored. We maintain full transparency in our data handling practices, ensuring compliance with GDPR’s principles of fairness and lawfulness.
- Data Subject Rights: We respect and uphold the rights of individuals under GDPR, including the right to access, rectify, erase, and restrict the processing of their personal data. We provide simple and effective mechanisms for data subjects to exercise these rights.
- Security of Personal Data: We respect and uphold the rights of individuals under GDPR, including the right to access, rectify, erase, and restrict the processing of their personal data. We provide simple and effective mechanisms for data subjects to exercise these rights.
- Data Breach Management: Protecting personal data from unauthorized access, loss, or breach is of paramount importance. Heimdal employs state-of-the-art encryption, access control, and monitoring tools to ensure the security of the data we process.
- Third-Party Data Processors: Heimdal ensures that all third-party processors we work with adhere to GDPR standards. We only engage with trusted vendors who implement robust data protection practices, and we maintain strict data processing agreements with all external partners.
- Ongoing Compliance: GDPR compliance is not a one-time effort; it is an ongoing commitment. Heimdal conducts regular audits, risk assessments, and training programs to ensure continuous adherence to privacy regulations and to adapt to any changes in the legal landscape.
Through these measures, Heimdal maintains a strong culture of privacy and data protection, ensuring that the trust our customers and partners place in us is honored with the highest level of responsibility.
For more information about how Heimdal handles personal data and complies with privacy laws, please refer to our:
Summary
Product Privacy Sheets
Offers detailed information about the data flows and privacy features specific to each product, highlighting the most important aspects for each.
Access Product Privacy Sheets BelowPrivacy Data Sheet
DNS Security - Network
Privacy Data Sheet
Patch & Asset Management
Privacy Data Sheet
Privilege Elevation and Delegation Management
Privacy Data Sheet
Privileged Account and Session Management
Privacy Data Sheet
Application Control
Privacy Data Sheet
DNS Security - Endpoint
Privacy Data Sheet
Next-Gen Anti-Virus, Firewall & MDM
Privacy Data Sheet
Ransomware Encryption Protection
Privacy Data Sheet
Threat-hunting & Action Center
Privacy Data Sheet
Remote Desktop
Privacy Data Sheet
Email Security
Information Security Compliance at Heimdal
At Heimdal, ensuring the security of our systems and the data we process is a top priority. We adhere to industry-leading security standards and continually work to maintain a robust security posture across all our operations.
- ISAE 3000 SOC 2 Type I Compliance: We have achieved SOC 2 Type I certification, demonstrating our commitment to ensuring secure processes and controls to protect customer data.
- ISAE 3000 SOC 2 Type II Compliance: Heimdal also holds SOC 2 Type II certification, which verifies that we maintain high standards for security over time, regularly assessing and improving our controls to meet the needs of our customers and partners.
- NIS 2 Compliance: Heimdal complies with the Network and Information Systems Directive 2 (NIS 2), which focuses on enhancing the security of network and information systems across critical sectors in the European Union. This directive mandates stringent cybersecurity requirements for businesses that provide
For a comprehensive overview of our security and compliance practices, please refer to our:
End User License Agreement (EULA) and Privacy Policy
The End User License Agreement (EULA) and Privacy Policy govern the use of Heimdal’s software and services. By using our products, all users agree to comply with the terms outlined in these agreements, ensuring responsible and lawful usage of Heimdal’s offerings.
- End User License Agreement (EULA): The EULA outlines the rights and obligations of users regarding the use of Heimdal’s software products. It specifies the permitted usage, restrictions, and the consequences of any violations.
- Privacy Policy: Heimdal’s Privacy Policy explains how we collect, use, and protect personal information in accordance with applicable data protection regulations, including GDPR. It ensures transparency in how customer data is managed and outlines the rights of individuals to control their personal information
For more details, please access the following documents: heimdalsecurity.com/license-agreement-and-privacy-policy