Payments: payment environment designed to align with PCI DSS
Oura says it maintains a payment environment designed to align with the Payment Card Industry Data Security Standard (PCI DSS) and that its payment processors are PCI DSS-validated service providers.
Supporting quotations
Oura maintains a payment environment designed to align with the Payment Card Industry Data Security Standard (PCI DSS)
Our payment processors are PCI DSS-validated service providers
Qualifications & exceptions
The environment is described as designed to align with PCI DSS; the source does not state that Oura itself is certified.
Security & Safeguards · Company commitment
International transfers: data protection agreements with service providers
Oura says it uses industry standard data protection measures to safeguard all international transfers of personal data through data protection agreements with its service providers.
Supporting quotations
We use industry standard data protection measures to safeguard all international transfers of personal data through data protection agreements with our service providers
Security & Safeguards · Company commitment
Safeguards: technical and organizational measures, including encryption and access control
Oura says it uses technical and organizational safeguards to keep your data safe and secure. When appropriate, these include anonymization or pseudonymization of personal data, strict access control and encryption of the data it processes.
Supporting quotations
Safeguarding your data
Oura uses technical and organizational safeguards to keep your data safe and secure
When appropriate, these safeguards include measures such as anonymization or pseudonymization of personal data, strict access control, and the use of encryption to protect the data we process
Qualifications & exceptions
The listed measures are used "when appropriate".
Security & Safeguards · Company commitment
Safeguards: personnel training and limited access to sensitive personal data
Oura says its personnel receive training so that personal data is processed only under its internal policies and applicable law, and that it limits access to your sensitive personal data to personnel who have specifically been granted access.
Supporting quotations
Our personnel receive adequate training to ensure personal data is processed only in accordance with our internal policies
We also limit access to your sensitive personal data to personnel that have specifically been granted such access
Security & Safeguards · Company commitment
Safeguards: encryption in transit for online services and regular vulnerability testing
Oura says online services it provides through its Site protect your personal data in transit with encryption and other security measures, and that it regularly tests its service, systems and other assets for possible security vulnerabilities.
Supporting quotations
Online services that we provide via our Site protect your personal data in-transit using encryption and other security measures
We also regularly test our service, systems, and other assets for possible security vulnerabilities
Qualifications & exceptions
The in-transit statement is about online services provided via the Site; the source does not say the same of other channels.
Security & Safeguards · Procedure
Security updates: Oura recommends keeping the app and firmware up to date
Oura says it updates its Services regularly to protect your personal data and recommends that you always have the latest app and firmware versions installed to maximize protection.
Supporting quotations
We update our Services regularly to protect your personal data
We recommend that you make sure that you always have the latest app and firmware versions installed in order to maximize protection of your data