Product questions

Evaluating MuchSkills? Security, GDPR, integrations and contracts are covered in the buyer FAQ.

Can you delete all data?

Yes, you can. By clicking a button in MuchSkills, an automated system will delete all your data.

‍

Can you export data?

Yes, you can. It's possible to export data via activated APIs, or you can request a data export. If you request a data export, it's your responsibility to ensure a fully secure way to transfer the data.

Do MuchSkills and individuals’ skills data adhere to GDPR?

A user can erase all data by going to their Profile Settings and choosing to delete and close their account. The data stored in AWS and ActiveCampaign will be erased instantly. Backups are kept for up to 90 days and then deleted.

If a user contacts MuchSkills directly and requests us to erase all their data we will ask the user to delete their profile as mentioned above. This is done in order to ensure that their data removal is automated and erased from all our channels.

Please note that information collected into Stripe, the payment service provider, cannot be deleted due to legal requirements to save financial information for a specific period of time.

Does MuchSkills have a Data Processing Agreement (DPA)?

Yes, MuchSkills is happy to sign a Data Processing Agreement.

How long do you plan to keep the data you collect?

We keep your organisation's data for as long as your subscription is active. People who leave are deactivated, not deleted, so project and certificate history stays available. When a subscription ends, data is deleted in line with our terms. We keep financial records for paying customers for as long as the law requires.

Is any data shared with third parties?

We never sell your data or share it for anyone else's use. To run MuchSkills we use a small number of sub-processors, such as our hosting provider in the EU, each under a data processing agreement. The current list is in our Trust Center at trust.muchskills.com.

Is data encrypted at rest (both on employee clients and in the cloud)? If yes, which algorithms are used? What does key management look like?

Encryption-at-rest is automated using AWS’s transparent disk encryption, which uses industry standard AES-256 encryption to secure all disk data. All keys are fully managed by AWS.

What data is added by users?

MuchSkills allows employees to decide whether they want to share their skills, certifications, and work experience with their organisation and colleagues. This data is only shared internally. The information an employee can voluntarily provide includes:

‍

- Their photo

- A brief description about themselves

- Skills and skill level

- Certifications and certification proof

- Work history

- Upskilling goals

- Education

- Project history and experience

What different roles have different kinds of data access?

MuchSkills has four roles.

Owner: full administration, and the only role that can delete the organisation and all its data.

Admin: all administration and settings, except deleting the organisation.

Analyst: sees all data in the organisation, with no access to settings.

Member: sees the views that belong to them. A member who manages people also sees their direct reports in My Circle and in reports.

Everyone in the organisation can see colleagues' profiles: name, title, department, manager, photo, about, skills, certifications and work history.

What employee data is uploaded by the organisation?

Only name and email are required. Everything else is recommended, because each field makes MuchSkills more useful: employee status, manager, job title, department, location and photo.

Additional optional data that can be provided includes:

- Direct report

- Title

- Department

- Employee image

- Tag (used for filters and to indicate a person's team affiliation)

- Badges

- Skills and skill level

- Certifications and certification proof

What security and compliance certifications do MuchSkills’ vendors hold?

MuchSkills uses certified and secure technologies. The database technology and server services are all certified.

MongoDB, the database we use, is SOC and ISO certified. 

Learn more here:
https://www.mongodb.com/cloud/atlas/security  and here https://www.mongodb.com/cloud/trust.

For server storage, we use Amazon Web Services or AWS, which is ISO certified and compliant with CSA STAR CCM v4.0.
Learn more here:
https://aws.amazon.com/compliance/iso-certified/

Where is your data stored?

Data is stored in the following locations:

  1. **Amazon Web Services** – This is our central cloud, where all the servers are hosted.
  2. **MongoDB Atlas** – This is our central database, where all the data is stored in an isolated private network with servers.
  3. **ActiveCampaign** – Is used for end user onboarding and sends emails to instruct and help end users.
  4. **Stripe** – All payment information.
  5. If individuals contact MuchSkills for support via email, chat, or similar, the information will be stored in Intercom, Hubspot and Google G Suite.

All selected vendors are known for their excellent security. For Hubspot we have activated their GDPR and California compliance process. MuchSkills uses two-factor authentication on all services and utilises long, computer generated passwords for maximum security.

The database in Atlas can only be accessed by selected team members who need it to improve the service.

Talk to a person

Email wow@muchskills.com or send us a message. We’re available 08:00 to 18:00 CET, Monday to Friday, in English and Swedish.

Checking Daniel’s calendar...

Ask us anything

A real person replies, usually the same working day.

Live webinar · 15 Oct, 10:00 CEST

How to analyse the Skill Gaps in your organisation

MuchSkills allows organisations to conduct an in-depth skills gap analysis in a matter of minutes and uncover the skill gaps that hurt organisational performance In this webinar, you will learn how t…