BambooHR

bamboohr.com · facts updated 59 minutes ago

Privacy facts at a glance

Retention: For payroll services, BambooHR may maintain payroll data or other Customer Data for 7 years from the time it provides a specific payroll service or files taxes; after subscription termination, Customer Data is available for download for 30 days before deletion.
GDPR addressed: Yes
CCPA addressed: Yes

Tracked documents

https://www.bamboohr.com/privacy-policy/ checked 1 hour ago

https://www.bamboohr.com/legal/terms-of-service checked 55 minutes ago

Data processing agreement

https://www.bamboohr.com/legal/data-processing-agreement checked 23 minutes ago

Subprocessor list

https://www.bamboohr.com/legal/subcontractors checked 18 minutes ago

Security / trust page

https://www.bamboohr.com/legal/security checked 54 minutes ago

Recent changes

minor Privacy policy 1 hour ago

BambooHR's privacy policy page now renders actual policy content (including a 'Last Updated: September 2025' notice and full policy text) instead of a Cloudflare bot-verification interstitial page.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track BambooHR in your workspace.

Get notified when BambooHR adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial

No card required.