BizCortex documentation

Data, export and privacy

Questions about exporting your data, GDPR and how your data is protected.

Steps

  1. 1. Can we export all our data?

    Yes. Owners and administrators open Administration, Settings, tab "Data export" and click "Create export". The export contains all data of the company as a ZIP file with JSON and CSV per table. Tick "Include attachments (files)" to add the files. The list shows each export with date, number of tables, records and size.

  2. 2. Does the data export replace a backup?

    No. The export is an extra copy, for example for a system change. Backups of the servers are made separately by the operator.

  3. 3. Is BizCortex GDPR compliant?

    BizCortex has a Data protection area in Administration for your GDPR duties: data subject requests with deadlines, the processing register, retention, consents, technical and organisational measures (TOMs), a data breach register with the 72 hour clock and the data processing agreement with the operator. The owner accepts the data processing agreement there.

  4. 4. How can an employee see the data stored about them?

    In My area, page "My profile". It shows the stored HR data (access under Art. 15 GDPR) and lets the employee request corrections from HR.

  5. 5. Who can see who changed what?

    The audit log in Settings records who created, changed or deleted what and when. Owners, administrators and the Compliance role can read it.

  6. 6. Can archived documents be changed or deleted?

    No. Documents in the document archive are kept unchangeable and can only be deleted after their retention period has ended.

  7. 7. Which service providers process our data?

    The privacy policy page, linked from the sign in page, lists the operator and the active subprocessors. The data processing agreement is in Administration, Data protection.

  8. 8. Does Brain see data I am not allowed to see?

    No. Brain acts only with your own permissions. It suggests; only what you confirm is saved.

Good to know

  • The documentation does not state the physical location of the servers. Ask the operator if you need this for your records.

Related

  • Full data export

    Download all data of your company as a ZIP file, for example when you switch systems.

  • Data subject requests

    Record and track requests under Articles 15 to 21 GDPR with their one month deadline.

  • My profile

    See the data stored about you and request changes from HR.

  • Compliance (audit only)

    Privacy, audit log and calling compliance, without business data changes.