balanceWORKS

Security

Data Retention Policies

Effective January 1, 2016

Last Updated: August 9, 2023

Audience

This document is for clients and prospective users who are interested in using applications developed and hosted by Berkshire, users of outsourcing and consulting services provided by Berkshire, attorneys and procurement officers of companies acquiring applications, internal Berkshire staff and IT personnel of Berkshire’s clients and prospective users.

Assumptions

The policies outlined below are the standards for the information in the delivery and execution of the products and services provided by Berkshire. These may be superceded by other mutually agreed upon terms but should be assumed to be the default behavior unless otherwise defined.

Data Retention by Product

balanceAAP

While maintaining an active subscription, Berkshire will retain your affirmative Plans accessible online up to 3 years from the plan date. After three years, those plans will be archived (stored offline) for 2 years. All plans with a plan date older than 5 years will be removed permanently from the system and backups. Access to archived plans will be available by contacting Product Support at product.support@berkshireassociates.com.

If the balanceAAP Subscription is terminated, the plans will be accessible online for two years from the plan date, one additional year in archive, and then will be permanently removed from our systems.

balanceTRAK

Closed requisitions and their associated job seeker applications and profiles will be archived when the requisition has been closed for 36 months. At 36 months your data will be moved from the system into an export file that can be downloaded and stored by your company. The export file will include information about requisitions, job seekers, and include resumes, applications and job descriptions. This exportable file of your company’s balanceTRAK data will be available by download for 90 days. After 90 days, the balanceTRAK archive file will be removed from the system.

On July 1, 2023, Berkshire announced balanceTRAK will be sunset as of December 31, 2024. Please visit this site for more information about the product sunset. All export files should be downloaded from the system by this date, as no access to the system will be available after this time.

balanceREACH

All Good Faith Effort information will be retained in the system as long as an active balanceAAP subscription is maintained. Upon expiration of the balanceAAP subscription, balanceREACH will be available for 90 days to access reports for any existing information.

Other Products and Consulting Services

Other products and services provided by Berkshire not defined above will be maintained online in Berkshire's systems for at least 3 years upon completion. After this period, information will be archived for 2 years and then subsequently removed from all systems.

Temporary Files

Temporary files used to produce results are removed from the servers as soon they are designated as no longer needed to complete a client request.

Backups

Daily backups of all production data for all systems are kept for six months. Hourly backups are retained for 24 hours. When data is permanently removed from our systems, data resides in backups for six months until appropriately aged out.

System and Audit Logs

Various server, network and other system logs are kept for different lengths, but for no less than six months. Application logs are retained at least for two years and as long as the client has an active hosting agreement with Berkshire. Log information is also correlated and stored in an Enterprise grade SIEM tool for 12 months for monitoring and analysis.

Financial and Administrative Information

All information related to the delivery of products and services, including documentation around the legal requirements for the operation of the business, are kept indefinitely while active, and kept for a minimum of seven years upon expiration.

Requests to Remove Data

In the event a client wishes to immediately remove all of their data from the system, either at the end of a subscription, or if cancelling an active subscription, the primary contact for an organization should reach out to their Berkshire account representative to request removal of all data in writing. Once submitted and verified, Berkshire will remove all client data at the file and database level. Analytics and logs required for performance monitoring that contain no Personally Identifiable Information may be retained for compliance and monitoring. Additionally, data will be retained in backups until aging out after 6 months.

In the event an inidividual makes an independent request to remove data, Berkshire will adhere to any applicable laws, and provide notification to the organization who owns the data for approriate handling.

Date Version Summary of Changes
11/3/2016 1.1 Initial Policy Draft
8/4/2017 1.2 Annual Review of Policy
8/8/2018 1.3 Product names updated, balanceREACH added to policy.
7/23/2019 1.4 Annual Review of Policy, added information about backups, temporary files, and system logs.
8/12/2020 1.5 Annual Review of Policy, added language about balanceTRAK export, and a section for requesting removal.
8/06/2021 1.6 Annual Review of Policy. Added sections for audience, assumptions and incorporated th definition for the retention of financial records and for other products and services not previously covered.
8/02/2022 1.7 Annual Review of Policy. Provided clarification around retention of backups. Adjusted language around individual data removal requests. Included retention for SIEM tool.
8/09/2023 1.8 Provided information about balanceTRAK sunset

Need more help?

If you are unable to find the answer to your questions or simply wish to speak to a support representative, email Product Support or give us a call at +1(800).882.8904.