Snapshot 22121
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to main content How Geckoboard protects your data Learn how Geckoboard keeps your data secure with strong security practices and strict compliance. March 4, 2026 Table of contents Your data is our most critical asset, and protecting it is our top priority. This page provides an overview of how Geckoboard handles your data, the measures we take to protect it, and the compliance standards we adhere to. The basics Geckoboard enables you to create live KPI dashboards that visualize data from your existing tools and data sources. You create connections to services such as Salesforce, Zendesk, Google Sheets, or other data sources using secure authentication. Geckoboard fetches only the data needed to calculate and display your metrics. Your dashboards update automatically so your team always sees current information. Trusted by thousands of teams Geckoboard was founded in 2010 in London, and for over 15 years, we’ve helped teams of all sizes track their most important metrics securely. Thousands of customers, including monday.com, Unilever, and PepsiCo, rely on Geckoboard to display live business data. Compliance and certifications We take security and privacy seriously, and maintain certifications and regulatory compliance to prove it: Payment Card Industry Data Security Standard (PCI DSS) compliance Cloud Application Security Assessment (CASA) certification General Data Protection Regulation (GDPR) compliance California Consumer Privacy Act (CCPA) compliance Our privacy compliance is overseen by our Head of Privacy, a certified Data Protection Officer (C-DPO). CASA PCI DSS We only process what’s needed Geckoboard follows a data minimization approach. We limit what we collect to what’s directly necessary to display your metrics. In many cases, we process metadata rather than raw content. For example, the Zendesk data source processes specific ticket fields required to power dashboards, rather than entire ticket bodies. On Enterprise plans, granular import controls enable you to choose exactly which fields are imported, allowing you to limit data exposure further. Your data is encrypted All data is protected using strong encryption, both in transit and at rest. In transit: All communication between your browser and Geckoboard is encrypted using HTTPS with 256-bit TLS encryption. At rest: Credentials for connected services are encrypted using the AES-GCM cipher with unique 256-bit keys for each service. Passwords are stored using bcrypt. You control access Geckoboard provides multiple layers of access control, enabling you to determine who has access to what with: Role-based permissions: Assign users as owners, admins, organization view-only, or dashboard view-only, each with different levels of access. IP restrictions: Limit dashboard access to specific networks and devices. Single Sign-On (SSO): Enterprise plans support SSO with Okta, Azure AD, and other SAML-based identity providers, enabling you to manage Geckoboard access centrally. Security testing We validate our security through ongoing internal and external measures: Quarterly vulnerability scans as part of PCI DSS compliance. Annual third-party penetration tests on the application and infrastructure. A bug bounty program that invites security researchers to report vulnerabilities responsibly. Additional resources Technical overview of security at Geckoboard Privacy policy Data Processing Agreement (DPA) EU data protection Security vulnerability reporting Related Articles Connect your Zendesk Support data to Geckoboard Display Firebase data in Geckoboard Use GoogleFinance to display market data in Geckoboard EU data protection Technical overview of security at Geckoboard Did this answer your question? Table of contents