Privacy statement

At Otherside at Work, we place enormous importance on the protection and proper handling of your personal information. In this privacy statement, we explain why and what data we collect, and outline your rights and options if you disagree with our practices. We have made an effort to present this information in a clear and simple way so that you can understand and feel comfortable with it. 

Link to our privacy statement.

General Terms and Conditions

Otherside at Work General Terms and Conditions of Delivery, issue date May 1st, 2023 (download).

License Terms and Conditions

Xpert Suite License Terms and Conditions, issue date July 11th, 2023 (download).

Security & Privacy Controls

Security & Privacy Controls - Otherside Software B.V, issue date March 6th, 2026 ((on request available, send email to Customer Success office).

ISO 27001

ISO/IEC 27001 certificate, issue date July 22th, 2025 (download).

Statement of Applicability Otherside Software (on request available, send email to Customer Success office).

SOC 2

SOC 2 assurance report, issue data February 13th, 2025 (on request available, send email to Customer Success office).

NEN 7510

NEN 7510 certificate, issue date June 2nd, 2025 (download).

Penatration Test

PEN test, last external test December 15th, 2025 (on request available, send email to Customer Success office).

Service Level Agreement

SLA version 6.1, issue date December 1st, 2025 (download).

Data Protection Officer and privacy & security team

Otherside has put in place a Data Protection Officer and a privacy & security team. This privacy & security team consists of representatives from all parts of the organisation who potentially come into contact with customer data (consultants, support, IT management). In this consultation, all ongoing improvement actions, incidents and risk analyses are discussed, thus ensuring an integral monitoring of the security. The Data Protection Officer has been appointed to supplement the impact in this consultation of improvement actions, incidents and risk analyses with consequences for data subjects. 

To report a security incident or data breach as a CUSTOMER to Otherside at Work

In addition, the data protection officer (DPO) and/or de information security officer (ISO) of Otherside at Work.

Data subjects contact

Otherside has set up a contact point for the data subjects which they can turn to with their questions. The basic rule is that a controller (i.e. the customer of Otherside) must communicate with the data subjects. But if this is not possible, Otherside wants to be accessible to data subjects and support them where possible in resolving any problems. Otherside can be reached by data subjects via: