Sonder IT security and privacy
Sonder takes data security and privacy seriously. Your data and your people's data are stored securely in AWS data centres with encryption, daily backups and industry-standard compliance certifications.
Where is my data stored?
To ensure data privacy and compliance with regional requirements, Sonder stores cloud data with Amazon Web Services (AWS) data centres. This geographically distributed approach places your and your people’s data in the AWS region you require, be it Australia or the United Kingdom.
Backups and recovery
- Daily backups: Backups occur every day, encrypted, and stored in AWS regional data centres
- Annual testing: Recovery practices are tested at least annually to ensure we can restore data if needed, aligned to meet RPO/RTO/MAO objectives outlined within Sonder’s Business Continuity Plan (BCP).
Data centre security
These AWS data centres are ISO 27001 and SOC 2 compliant, and include backup power, HVAC systems and fire suppression equipment to help protect servers and ultimately your data. AWS on-site security includes features such as security guards, fencing, security feeds, intrusion detection technology and other security measures.
Where can I learn more about Sonder's information security program (including Certification, Software Development, Business Continuity and Data Residency)?
Sonder takes privacy very seriously and our security philosophy in how we manage and protect data puts you and your people first. We maintain a robust security program that’s guided by formal policies and requirements that meet the latest industry standards. This ensures that we’re staying ahead of any cyber threat.
For more in-depth information about Sonder’s information security program - including details about certification, software development, business continuity, and data residency - please head over to our Sonder Security webpage.
Frequently asked questions.
Is my personal information encrypted?
Yes. Data in transit and at rest is encrypted using industry-standard encryption protocols. This protects information both when it's being transmitted and when it's stored.
Can Sonder staff see my personal information or conversations with Care Specialists?
No. Data access is restricted and logged. Sonder staff only access your information when necessary to provide support or resolve technical issues. Your conversations with Care Specialists are confidential.
Is my data shared with third parties?
Your data is not shared with third parties without your consent, except where required by law. Sonder may use trusted partners for specific functions (e.g. cloud infrastructure, backups), but these partners are bound by confidentiality and security agreements.
What if there's a data breach?
Sonder has incident response procedures in place. In the unlikely event of a breach, Sonder is required to notify affected individuals and organisations in accordance with applicable privacy laws. You will be informed directly if your data is affected.