THE GDPRPCLOUD'S ROAD TO FULL COMPLIANCE

A WAY TO STRENGTHEN DATA PRIVACYThe General Data Protection Regulation is a unifiedframework of data privacy rules, accepted by theWHAT IS
THE GDPR?

European Union in April 2016.
It replaces the 1995 Data Protection Directive, inaims to give users more control overtheir PERSONAL DATA and unify regulations acrossall 28 EU member states.
As of May 25, 2018,
the GDPR has become a fact!

WHAT ISPERSONAL DATA?
ANY INFORMATION RELATING TO ANIDENTIFIED OR IDENTIFIABLE NATURAL PERSON
An identifiable natural person is one who can be identified,directly or indirectly, in particular by reference to an identifier
such as a name, an identification number, location data, anonline identifier or to one or more factors specific to thephysical, physiological, genetic, mental, economic, cultural orsocial identity of that natural person.

More GDPR terms

SOME OF THE WAYS THE GDPR
EXPANDS YOUR PERSONAL PRIVACY:

BREACHNOTIFICATIONRIGHT TOACCESSRIGHT TO BE
FORGOTTEN

Be entitled to receive real-Confirm how your personal

Have all your personal

time notifications from yourinformation is processed,

information deleted from aservice provider, in case of awhere and for what

service upon request anddata breach.

purpose.

forbid further dissemination.

Learn more

AT PCLOUDWE RESPECT AND PROTECTYOUR PRIVACY.
OUR LEGAL AND SECURITY TEAMS HAVE MADE SURE PCLOUD HAS TAKEN ALL THE
NECESSARY STEPS TO MEET FULL GDPR COMPLIANCE.

DATAPROTECTION
Our data center are chosen following intense risk assessment
processes that have proven the quality and reliability of ourservice. This includes selecting of the highest level of physical andtechnical security application, to ensure full data securitycompliance.
pCloud hosts user data through a leading certified data center via
colocation. We are compliant under ISO 9001:2008 and27001:2013 certificates for Quality Management and DataManagement Systems. In addition, pCloud’s quality management
systems are validated by an independent third party certification
authority, with the aim to provide a solid scalable framework for
managing the company’s activities.

The basic objective of ISO 27001 is to help establish
and maintain an effective Information Security
Management system that has a defined continual
improvement approach, which can grow and change
along with the business and the technologies used.

ISO27001:2013
THE LEADING AND MOST UPDATEDINFORMATION SECURITY MANAGEMENTSTANDARD IN THE WORLD.

Its scope includes monitoring, management andsecurity of pCloud’s Internal Data Bases and Users'
Data.
pCloud as a service hosts user data through a leading
certified data center, certified for SSAE 16 SOC 1, TypeII ensuring the highest levels of security. When using
the pCloud service your data is transferred to ouroutsourced servers via TLS/SSL protocol and is copied
on at least three server locations.

Learn more

REGARDLESS OF YOUR PCLOUD PLAN,YOUR DATASTAYS SECURE.
The files you store in pCloud are secured with 256-bit AES encryption during and after transfer. In addition, upontransfer, pCloud also applies TLS/SSL channel protection.
If your pCloud account is closed, we may take steps to mask Personal Data and other information, but we reserve
our ability to retain and access the data for so long as required to comply with applicable laws.

Your Privacy Options

CLIENT-SIDE
ENCRYPTIONENCRYPTION HAS BECOME A BENCHMARKFOR SECURITY.
“Client-side” refers to the moment when your files are actually
encrypted. Your files are encrypted on your device, before anytransfer operation is initiated.
pCloud Crypto uses client-side encryption to ensure an additional
layer of security. This means that, upon transfer, your data isalready protected, preventing the chance of data leaks, orunauthorized access.

ZEROKNOWLEDGE

PRIVACY POLICY

Once a password is created in a zero-knowledge environment nocopies of personal keys and passwords are stored on the serversof the company. As such, the company has no way to access andknow what kind of information you have in your account, making
you fully in control over your data.
Neither pCloud as a service provider, nor any authority or service
will ever have access to your encrypted files. We do not store yourCrypto Pass on our servers, which means that you're the one incharge.

WORKING TOGETHER TO PROTECTYOUR PERSONAL DATAOUR COMMITMENT TO PROTECTING OUR USERS’ PERSONAL DATA LIES IN EVERY STEP AND
DECISION WE TAKE. FOR MORE INFORMATION, LET'S GET IN TOUCH
AT PRIVACY@PCLOUD.COM.