Security, Business Continuity, and Data Protection: Geobadge’s Commitment
Information security is a priority for Geobadge and guides every technological and organizational decision. The company implements rigorous controls, structured processes, and solutions designed to ensure data protection, reliability, and business continuity, providing a secure, resilient infrastructure that complies with industry best practices.
(Legislative Decree No. 196/2003)
Service Delivery Infrastructure
The platform is hosted on cloud infrastructure designed to ensure high levels of reliability, service availability, and data protection. The server environment is constantly monitored and managed through control systems that ensure high standards of operational security and service continuity.
All data center systems have been designed and built to meet and exceed the resilience requirements of Rating 4 (formerly Tier 4) of the ANSI/TIA 942-B-2017 standard, one of the highest levels of reliability required for data center infrastructure.
These features ensure high levels of business continuity, infrastructure redundancy, and system protection, even in the event of failures or unforeseen incidents.
Data Protection and Backup
To ensure the protection of information and the ability to restore systems in the event of an incident, the Geobadge platform implements the following measures:
These procedures allow for data recovery in the event of:
Hardware Failures
Software Malfunctions
Operational Errors
Cyber Incidents
Security, Privacy, and Service Continuity
The platform implements technical and organizational measures to ensure data security, privacy protection, and service continuity.
Data is exchanged between users and the platform exclusively through secure connections based on the HTTPS and TLS (Transport Layer Security).
Data stored in the systems is also subject to encryption mechanisms, ensuring that information is protected from unauthorized access.
The platform implements technical and organizational measures to ensure the protection of personal data and the security of information. The systems are constantly monitored and updated to maintain high levels of reliability, integrity, and account security.
The cloud infrastructure used to deliver the service is included in the provider’s provider’s Business Continuity and Disaster Recovery plans. These plans include periodic checks and tests to ensure operational continuity and service availability even in critical situations.
The entire software development and management process involves the adoption of policies and procedures designed to protect personal data. The design is geared toward ensuring the security and confidentiality of information, in compliance with information security standards and applicable regulations.
Two-factor authentication
To enhance the security of access to the to the Geobadge website and app, two-factor authentication (2FA) is available.
When this mode is enabled, in addition to entering login credentials (username and password), an additional factor is required to verify the user’s identity. This mechanism significantly reduces the risk of unauthorized access, even if the credentials are compromised.
Two-factor authentication can be enabled directly by the user or made mandatory by the system administrator through the portal's security settings.
The authentication system is part of the security model adopted by the Geobadge platform, which is based on the principles of Zero Trust Architecture, under which every access request is verified and authorized based on the user’s identity, assigned permissions, and the context of the request, regardless of the network or device used.
How We Ensure the Security of Your Data
Geobadge has implemented an information security management system to ensure business continuity, minimize risks, and ensure compliance with security objectives.
Frequently Asked Questions About Data Security
Data backups are stored on systems located in Italy. The cloud infrastructure used complies with the data protection and residency standards required by European law.
Yes. The GPS is activated only to validate the current clock-in: when the employee launches the app, the GPS turns on only at that moment; the location is used solely to validate the clock-in and is not stored (only the result—"valid/invalid clock-in"—is saved), after which the GPS turns off. Geobadge does not perform continuous monitoring, does not track movements outside of working hours, and does not share location data with third parties.
Data is stored on secure storage systems for 3 months after the account is closed, unless an explicit request for early deletion is made. After this period, the data is permanently deleted.
Access is governed by a selective permission system: only authorized users (e.g., administrators and HR managers) can view the information, based on their assigned roles.
Geobadge has internal policies dedicated to managing security incidents (data breach alerts), with procedures for detection, notification, and response in compliance with the requirements of the GDPR.
Employees may exercise their right to erasure (Art. 17 of the GDPR) by contacting the data controller—that is, their employer—which will process the request in accordance with legal obligations and any document retention requirements.