April 16, 2024
When choosing an employee experience software partner, it is crucial to consider security and privacy. The digital landscape has seen an increase in security breaches and data privacy issues in recent times, affecting various sectors. These incidents have led to considerable financial and reputational damage for businesses. Therefore, it is important for buyers to ensure that their chosen software partner has robust security measures in place and respects data privacy. Ensuring this will not only protect the company’s sensitive information but also build trust with employees who use the software.
Surprisingly, even brands that seem like industry leaders can have weak security or questionable privacy policies. See the bottom section for which recognition and rewards vendors have the most user trackers installed.
ISO-27001 is an internationally recognized standard that sets out the requirements for an information security management system. It provides a systematic approach to managing sensitive company information and ensuring it remains secure. This includes applying a risk management process and giving assurance to interested parties that risks are adequately managed.
ISO-27001 is often considered superior. This is because it is more widely recognized internationally and provides a more holistic, risk-based approach to information security. Whereas SOC2 is managed by CPAs, who are not security experts.
SOC2 Certification, although not as thorough and secure as ISO-27001 is often considered “Good enough” for many IT departments, even though SOC2 is managed by accountants and not security professionals.
The Service Organization Control (SOC) 2 is a certification introduced by the American Institute of CPAs (AICPA). SOC 2 pertains to the security of a service provider’s systems. It was developed to ensure that systems are designed to keep clients’ sensitive data secure. When a company achieves SOC 2 compliance, it indicates that they have established some controls over the security, availability, processing integrity, confidentiality, and privacy of data. This compliance is particularly important for SaaS providers, IT managed services, and any other service providers that store customer data in the cloud.
Just because a search yields no results on which certification a vendor has, that doesn’t mean they don’t follow best practices. However, when a third party company audits a vendor’s processes, the vendor often steps up and is more thorough.
Recognize App has some of the has some of the highest level of security in the industry with the best-in-class Microsoft Teams integration, customization, and price point. If you are looking for a secure partner focused on security and privacy, reach out to us.
Employee experience platforms are often no different from any other vendors you use. Some will have more scripts on their site to track you than others. Using the browser Brave, we are able to identify number of trackers used by employee recognition and reward vendors as of April of 2024.
| Company | Number of Website Trackers |
|---|---|
| Recognize | 3 |
| Vantage Circle | 12 |
| Nectar | 7 |
| Achievers | 10 |
| Bonusly | 4 |
| Workhuman | 2 |
| Awardco | 15 |
| Guusto | 9 |
| Reward Gateway | 10 |
| Motivosity | 4 |
| Empuls | 3 |
| Kudos | 5 |