Terms of Service FAQ
March 27, 2026
Security Breach
These Terms of Service FAQs are for informational purposes only—they are not contractual or binding in nature. These FAQs should not be seen as a substitute for reading and understanding BambooHR’s Terms of Service. Please see section 17.9 of the Terms of Service for additional information.
How does BambooHR handle a Security Breach? (10.1-10.3)
If a Security Breach is reported to or discovered by BambooHR, BambooHR will comply with all applicable laws and regulations, which may include a notification to you, the impacted individuals, and regulatory agencies. The investigation by BambooHR will include identification of root cause, appropriate remediation efforts, action to prevent any recurrence, and protection against identity theft. If the customer identifies a Security Breach of their data stored in the BambooHR® application, the customer must notify BambooHR. The customer is also responsible for responding to the Security Breach. All communications to impacted individuals and regulatory agencies must be reviewed by BambooHR.