Trust & Security
Team Today is fully GDPR compliant, hosted on AWS in London (eu-west-2) with redundancy in Ireland (eu-west-1), collects only the minimal data the product needs, and only the company’s two founders can access customer information. This page is the full picture an IT or procurement review needs.
Reviewed August 2026Where is our data stored?
On AWS in London (eu-west-2), with eu-west-1 (Ireland) as redundancy. The architecture is cloud-native with zero-downtime deployments. Data lives in MySQL on AWS, with access restricted to private-cloud services or an IP allowlist. Backups are made nightly to encrypted storage, with access restricted to the Director of Engineering.
How does data travel?
All traffic runs over HTTPS/TLS, with HTTP redirected. The web app, API and public site each use non-wildcard AWS certificates.
How do people sign in?
Office 365 single sign-on or Google SSO (each honouring your organisation’s own MFA policy), or email and password, salted, hashed and compared in line with OWASP guidance. Requests are authorised via signed JWTs.
What does Team Today hold about a person?
Minimal data is a design decision, not a by-product. Here is everything Team Today holds about a person, and everything it doesn’t:
| Held | Never held |
|---|---|
| Name and email | No payroll or salary data |
| Company, team and permissions | No contracts or employee documents |
| Office details and floor plans | No performance reviews |
| Additional responsibilities (e.g. fire warden) | No tracked locations; whereabouts are self-reported plans |
| Holiday dates | No activity monitoring or hours logging |
| Planned working locations | No sensitive personal data, by design |
Who can access our data?
Only Team Today’s two founders have access to customer information, and the company has two registered data officers. Two-factor authentication is mandated on all internal systems and access is continuously reviewed. There is no human login to production API servers: all changes go through the release pipeline. Platform logs are retained for 7 days and then permanently deleted, with monitoring and anomaly alerting in place; website analytics are anonymised.
Who are your subprocessors?
Three: AWS (hosting), Google Analytics (anonymised website analytics), and Stripe (payments). Stripe is the only third party that holds customer information, and only for payment processing. Personal data is not shared with anyone else.
What happens if we cancel?
All users and company data (offices, car parks, desks, meeting rooms) are purged, which renders the remaining booking data useless; that orphaned booking data is then deleted by a batch job. Deleted users are permanently removed. Our data processing agreement commits to deleting all customer personal data within 10 business days of the contract ending.
Are you ISO 27001 certified?
Not yet; ISO 27001 certification is on our roadmap. What is true today: Team Today is fully GDPR compliant, hosted on AWS in London with Ireland redundancy, collects minimal data by design, has no human access to production servers, and offers a standard DPA with audit rights.
GDPR and contracts
Team Today is fully GDPR compliant. A standard data processing agreement is available on request: UK law, EU standard contractual clauses for any transfer outside the EEA, breach notification without undue delay, and customer audit rights.
How responsive is support?
Most support queries are answered within a few hours. As Jen Guy of Galapagos Conservation Trust put it in a published AppSource review (June 2025): “Any time we have had an issue or question it has been responded to with efficiency. The team are extraordinarily helpful!”
What about uptime?
Team Today had 100% uptime over the last quarter (as of August 2026). Premium plans carry a contractual 99.9% uptime SLA.
Security review FAQs
Are you ISO 27001 certified?
Can you provide extended log retention for our incident investigation or audit requirements?
What happens to our data if we cancel?
What PII do you hold on our users?
Where is our data stored?
Who can see our data?
Approve it once, then never think about it again
Team Today rolls out in minutes from the Microsoft Teams app store, with Entra ID sync for joiners and leavers. Free for teams up to 10 · from £1 per user/month · see pricing.