How we keep your data safe
Gaggle and Launchline hold training records, reviews and product plans. Here's how each company's data is kept separate, who can sign in, and and what happens to the documents you upload.
Separate by design
Every customer is its own organization, matched to its Microsoft tenant. The database itself only shows and accepts that organization's rows, so a mistake in one query can't expose another company's data. Automated tests check this on every change.
Microsoft sign-in only
There are no Gander Data passwords. People sign in with their Microsoft work account, so your own sign-in rules, like multi-factor authentication, apply. People from companies that aren't set up can't create accounts.
Records that can't be changed
Training sign-offs, quiz attempts, published versions, certificates, review acknowledgments and the audit log can be added to but never edited or deleted. A database rule blocks it.
Access by role and reporting line
Managers see the people under them and no one else. HR, admins and report viewers are chosen by your company. A leader's private notes are visible only to the author and HR.
Stored in the US, sent securely
Your data and files are stored in the United States, under your organization only. Everything travels over HTTPS, and downloads and exports are logged.
AI only when you turn it on
AI course drafting in Gaggle is optional. Admins turn it on or off for the whole company and set a monthly limit. Documents are used only to create the draft you asked for.
Need more detail?
We'll answer your IT team's security questionnaire and walk them through Microsoft app approval.
- Security questionsEmail support@ganderdata.co or ask during your demo.
- Data processing agreementAvailable for customers on request, along with the list of service providers we use.
- Report a vulnerabilityEmail support@ganderdata.co with "Security" in the subject.