Other Covered Entities

Software Compliance Group


  • Information and Communications Technology
  • Software


Swiss-U.S. Privacy Shield Framework: Active

Original Certification Date: 5/25/2017
Next Certification Due Date: 11/1/2019
Data Collected: NON-HR

EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 12/7/2016
Next Certification Due Date: 11/1/2019
Data Collected: HR, NON-HR

Purpose of Data Collection

COLLECTION AND USE OF PERSONAL DATA Revulytics collects and processes personal data (a) for the purpose of meeting its performance obligations under an existing contract with its Clients or to enter into a new contract with Clients, (b) on the basis of consent, or (c) to meet our legitimate interests (such as for business operations, to meet legal obligations, for network security purposes, and for advertising, market research and direct marketing). The use of personal data collected through the publicly accessible portions of our Web Site shall be limited to the purposes set forth below. At times, Revulytics may also collect your personal data such as contact information and interests from third-party marketing list suppliers in order to contact you for activities including direct marketing and for content syndication for interest-based advertising. In the normal course of business activities, Revulytics may process personal data as either a controller or a processor, as follows: Data Controller: Where Revulytics collects and processes personal data for the purpose of its day-to-day business operations, such as marketing and customer relationship management, it is acting as a data controller. This Policy applies solely to those instances in which Revulytics is the data controller. Data Processor: Where Revulytics provides products and services for its Clients, it may process personal data on behalf of those Clients. In such cases, the Client is the data controller. This Policy does not apply to such processing. The processing of such personal data on behalf of Clients is, and will be, carried out by Revulytics in accordance with the terms of the relevant contract or contracts between Revulytics and the Client that provides the personal data to us for processing. For additional information, see the section below on Information on Data Obtained with respect to our Intelligence product platforms specifically. When you visit our Web Site and access information, you remain anonymous. However, when you engage in certain activities on this site, such as requesting product information or registering for a live event, Revulytics may ask you to provide certain information about yourself such as your name, email address, phone number, or address. You are not required to provide your personal data, but if you decline, Revulytics may not be able to process your request. We ask only for data that is adequate, relevant and not excessive for those purposes. When we ask you for personal data, we tell you the purposes for which we will process that data. Some of these purposes include the following: We may contact you occasionally to inform you of new services we will be providing, or special offers, events or articles we think will be of interest to you. In some instances, we may provide you with the opportunity to register for webinars co-hosted by select partners with whom we may share the personal data you provide us so they may send you offers which may be of interest to you. If you do not want us to use your personal data for these purposes, you may contact us at privacy@revulytics.com. We may send you requested product information and promotional material. We may use your personal data for marketing purposes and market research. We may use your personal data internally to help us improve our products and services and to help resolve any problems. When you submit personal data to Revulytics, you understand and agree that Revulytics and its subsidiaries, affiliates and trusted vendors may transfer, store, and process your customer profile in any of the countries in which Revulytics and its affiliates maintain offices, including without limitation, the United States. Such other countries may not have the same level of privacy protections as the EU.

Privacy Policy

HR and Non-HR Data



Effective Date: 5/23/2018

Verification Method

Outside Compliance Review

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Revulytics, Inc at:

Victor DeMarines
VP, Products and Strategy
Revulytics, Inc
130 Turner St, Bldg 2
Waltham, Massachusetts 02453

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Revulytics, Inc to your question or complaint, please contact the independent recourse mechanism listed below


Appropriate statutory body with jurisdiction to investigate any claims against Revulytics, Inc regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission