Sapience Analytics and GDPR
CertReports found no public GDPR evidence for Sapience Analytics as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 8 May 2024
- Expires or valid through
- 1 Apr 2027
- Scope
- SapienceIQ is a service that collects user (employee) metrics concerning desktop activities and displays those data on a web interface. The goal of this platform is to enable managers of a business to see the workload and time distribution of the employees when operating their workstation. The web interface contains different analytics to be able to interpret the collected information for several use cases (time distribution per program, balance between private and work-related tasks etc.). Sapience Analytics acts as a processor while relying on its customers (businesses that use the service) to ensure a legal basis to process their employees' data (consent or otherwise). The data that is collected from the employees (though a data collector, IQSync) is sent to Microsoft Azure and Confluent Cloud (third party provider for processing raw (event) data beforehand). Once the data is processed through Confluent Cloud (also resides on Microsoft Azure, but as a different tenant) the data is stored within Snowflake, a federated data warehouse (third party service provider to Sapience). Users can access their own data through the web interface. With their authentication, users only get access to the data related to the role that user has (Admin, Manager, Worker). Admin - can make configuration changes in SapienceIQ and can view all data. Manager - has access to his or her own data and their team(s), if applicable. Users only have access to their own data. The Microsoft Azure instances are located in the United States. IQSync is the software that is installed on employee workstations. IQSync collects information about different activities on the workstation to enable (after collecting and processing all the data in the cloud) analytics about the work behavior. The data involve meta information about what kind of activity has been done on the workstation in which time period by checking active programs (like text processing, browser activity, etc.) and visited websites as well as data collected through integrations (Meeting names from Outlook or Teams, Chat names or the ticket status in Jira, for example). SapienceIQ uses a "whitelist" approach, meaning that apart from the default configuration (including obvious programs like Microsoft Word or websites like Google) everything collected from Sapience Lens as activity is marked as "private". Private activities are grouped and not linked to an individual employee (it is anonymized on Microsoft Azure). If employees using IQSync are for example visiting facebook.com (and it has not been whitelisted manually by the manager), it will only show the time spent on facebook.com in general, not by employee etc. Third parties involved: 1. Name: Microsoft Azure Address: One Microsoft Way, Redmond, WA 98052 Contact person’s name, position, and contact details: https://www.microsoft.com/en-us/concern/privacy Description of processing: Microsoft Azure is the cloud hosting provider for Sapience Analytics and hosts cloud security tools in support of Sapience products. 2. Name: Okta (Formerly known as Auth0) Address: 10800 NE 8th Street Suite 700 Bellevue, WA 98004 Contact person’s name, position, and contact details: [email protected]. Description of processing: Identity as a service tool for Sapience Vue. It manages authentication and identity of data subjects for Sapience Vue. 3. Name: Confluent Cloud Address: 899 W Evelyn Ave, Mountain View, CA 94041 Contact person’s name, position, and contact details: https://www.confluent.io/contact Description of processing: Data streaming service to consolidate data collected and processed by Sapience Vue to internal databases. 4. Snowflake Address: 103 East Babcock Street, Suite 3A, Bozeman, Montana 59715 Contact person’s name, position, and contact details: [email protected] Description of processing: Federated data warehouse and data processing.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Sapience Analytics: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 a3b43a9f87 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Sapience Analytics GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Analytics category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Analytics vendor has GDPR evidence in the index yet.