Cooperation, Assessments and Audits | Data Processing Agreement FAQ

These Terms of Service FAQs are for informational purposes only—they are not contractual or binding in nature. These FAQs should not be seen as a substitute for reading and understanding BambooHR’s Terms of Service. Please see section 18.8 of the Terms of Service for additional information.

May I audit BambooHR’s compliance with this agreement? (7.3)

Customers may audit BambooHR at their own cost; nothing in the GDPR requires processors to bear the costs of an audit conducted by a controller. Clients may not audit BambooHR more than once in a 12-month period unless the audit follows a Security Incident.

Does BambooHR extract our data upon termination of the contract?

Customers may extract most data by following instructions from BambooHR. There is certain data that can only be extracted by BambooHR and can be provided to customers upon termination. All customer data will be deleted thirty (30) days after cancellation of the contract.