Security and integrations
The answers IT asks for, all in one place
Data, GDPR, sign-in, AI and integrations, answered straight. So you can say yes to a workshop without anyone having to email first.
- Storage
- Your data is stored and processed in Sweden, with backups within the EU.
- GDPR and DPA
- Vocean complies with GDPR, and all data is processed within the EU/EEA. Enterprise customers can sign a data processing agreement (DPA) with us.
- Data ownership
- You own your data, and activity data can be exported. When the licence period ends, the content is read-only for 90 days, and then the data is deleted.
- Two-factor sign-in
- Two-factor sign-in is included in Team and Enterprise.
- SSO
- Single sign-on (SSO) is included in every plan, via OpenID Connect with Microsoft Entra ID. Roles and permissions are managed in Vocean and are not synced from Entra ID.
- Vocean AI
- Your data is not used to train or improve AI models.
- Participants
- Participants don't need an account. They click a link and they're in.
- Integrations
- Activity data can be exported to CSV, for example to Excel. An external API is not part of the standard service, but can be made available on request at an extra cost.
Data and storage
Where the data lives, and who owns it
This is usually the first thing IT asks about, so we start here.
Storage
Your data is stored and processed in Sweden, with backups within the EU.
Ownership and termination
You own your data, and activity data can be exported. When the licence period ends, the content is read-only for 90 days, and then the data is deleted.
Anonymous contributions
Participants answer anonymously. The idea carries the weight, not the person behind it.
GDPR and DPA
GDPR and data processing agreements
Municipalities, regions and federations use Vocean, and for them GDPR is always part of the decision.
GDPR and DPA
Vocean complies with GDPR, and all data is processed within the EU/EEA. Enterprise customers can sign a data processing agreement (DPA) with us.
Participants without accounts
Participants don't need an account. They click a link and they're in. So you don't need to set participants up as users.
Privacy policy
How we process personal data is described in our privacy policy.
Read the privacy policy
Sign-in, SSO and MFA
The right people in, no hassle for participants
Whoever runs workshops signs in. Whoever takes part clicks a link.
Two-factor sign-in
Two-factor sign-in is included in Team and Enterprise.
Single sign-on (SSO)
Single sign-on (SSO) is included in every plan, via OpenID Connect with Microsoft Entra ID. Roles and permissions are managed in Vocean and are not synced from Entra ID.
Participants
Participants don't need an account. They click a link and they're in.
Member management
Invite colleagues and control who has access to what. Included in Team and Enterprise.
Registered participants
Participants with their own account, for ongoing dialogue with the same group. Included in Team and Enterprise.
Vocean AI and data
What Vocean AI does with what you write
Vocean AI reads the contributions in your workshop and brings out patterns, needs and opportunities, so the summary is ready right away.
Training on your data
Your data is not used to train or improve AI models.
Sub-processor and region
Vocean AI uses AI services in Microsoft Azure in Sweden.
Input, not decisions
Vocean AI builds the basis. People make the decisions.
Integrations
Fits into your IT environment
Vocean runs in the browser, with nothing to install. Sign-in can connect to your Microsoft Entra ID, and you can take your data with you.
Export and API
Activity data can be exported to CSV, for example to Excel. An external API is not part of the standard service, but can be made available on request at an extra cost.
Microsoft Entra ID
Single sign-on (SSO) is included in every plan, via OpenID Connect with Microsoft Entra ID. Roles and permissions are managed in Vocean and are not synced from Entra ID.
Link or QR code
Participants join through a link or QR code, without installing anything.
Documentation on request
Need more for your review?
Detailed security documentation is available on request. Tell us what your IT or procurement process needs, and we'll help.
Things you can ask us about
Security questionnaires from your IT Data processing agreement (DPA) Storage, sub-processors and data flows Agreements and terms for Enterprise
Questions and answers
Common questions from IT
Where is our data stored?
Your data is stored and processed in Sweden, with backups within the EU. The sub-processors are Microsoft Azure, for hosting, storage and AI services, and Auth0 by Okta, for sign-in. Auth0 stores and processes data within the EU/EEA.
Is Vocean GDPR compliant, and can we sign a data processing agreement?
Yes. Vocean complies with GDPR, and all data is processed within the EU/EEA. Enterprise customers can sign a data processing agreement (DPA) with us.
Who owns the data, and what happens when we leave?
You own your data, and activity data can be exported. When the licence period ends, the content is read-only for 90 days, and then the data is deleted. If you want help exporting when you leave, request it in writing no later than 15 days before the licence period ends. An administrative fee applies.
Do participants need an account?
No. Participants don't need an account. They join through a link or QR code, fully anonymously, and Vocean stores no personally identifiable information about participants who join through a link.
If you only want invited people to take part, participants can register with your organisation's account free of charge, without a licence. The person running the workshop then invites them. Registered participants are part of Team and Enterprise.
Is Vocean AI trained on our data?
No. Your data is not used to train or improve AI models.
How Vocean AI handles your dataIs there two-factor sign-in and SSO?
Two-factor sign-in is included in Team and Enterprise. Single sign-on (SSO) is included in every plan, via OpenID Connect with Microsoft Entra ID. Roles and permissions are managed in Vocean and are not synced from Entra ID.
Need an agreement? Read about EnterpriseWhich integrations are there?
Activity data can be exported to CSV, for example to Excel. An external API is not part of the standard service, but can be made available on request at an extra cost.
Can we get security documentation for a review?
Yes. Detailed documentation is available on request. Tell us what your IT or procurement process needs, and we'll help.
Contact usIT has its answers. Now for the workshop.
Start a free trial and see for yourself how Vocean works with your team.