Who owns the data on Workplace and where is the data stored?
Workplace customers act as data controllers and appoint Facebook as a data processor under the Workplace Enterprise Agreement.
As the data controller, you make the decisions about what can be done with your data, including whether to modify, delete or export it. The data that your employees create on Workplace belongs to your organization and can't be accessed publicly.
The Workplace Online Terms provide customers with various contractual protections when it comes to the handling of customer data, including, in particular, those set out in the Data Processing Addendum and the Data Security Addendum of the Workplace Online Terms. For our EU clients, Workplace provides an additional addendum with standard contractual clauses (SCCs) to assist them, as data controllers, in ensuring compliance with their obligations under General Data Protection Regulation (GDPR).
Data storage
To protect your data and provide unprecedented performance and availability within our platform, data on Workplace is stored globally across Facebook's data centres located in the US and the EU.
Workplace is designed to stay up and running, no matter what, thanks to our globally distributed infrastructure:
- Physical security safeguards for our data centres and offices
- Mitigate against denial of service attacks or local disasters
- Advanced threat intelligence and automated detection using machine learning
- 24/7/365 monitoring by dedicated teams
Data separation
Workplace and Facebook are separate platforms with different accounts and profiles. Posts made on one aren't visible on the other. Workplace benefits from Facebook's company-wide investments in security, infrastructure and technical innovation.
No advertising on Workplace
We process your data to ensure that you have the best possible experience with Workplace. We don't use it to show ads, and we take strong measures to prevent any misuse of data by internal or external parties.