Harmony Email & Collaboration Privacy

Data Sheet

This Privacy Data Sheet explains how Check Point’s Harmony Email & Collaboration Solution (“Harmony Email & Collaboration”) processes personal data.

About Harmony Email & Collaboration

Harmony Email & Collaboration is an innovative security solution for cloud email (Microsoft 365 and Gmail) and collaboration applications. It utilizes a unique technology that allows it to be deployed with no mail exchange (MX) record change, provides a unique capability to observe activities within the cloud environment, and offers real-time prevention against threats before reaching its users’ mailboxes. Harmony Email & Collaboration secures business communication channels, including file sharing applications like OneDrive and Google Drive, as well as messaging platforms such as Slack and Microsoft Teams. Harmony Email & Collaboration is an integral part of the Check Point Infinity infrastructure, allowing it to easily integrate with many Check Point security services and other third-party security solutions to provide a comprehensive security solution for the organization’s users and assets.

How Does Check Point Comply With Applicable Data Protection Regulations?

At Check Point, ensuring customer privacy and security remains our foremost concern, with the trust our customers place in our services being one of our most valued assets.

Security. As a leading AI-powered, cloud-delivered cyber security platform provider over the past decades, we acknowledge the significance of implementing rigorous security measures to safeguard our customers’ information. For more details, visit our Information Security Measures Policy.
Privacy by Design. We operate under the principle of privacy by design. This means that we prioritize the protection of personal data and privacy throughout the entire lifecycle of our products and services. We treat personal data with the utmost care. Our commitment to privacy is reflected in our policies, procedures, and the way we do business. For more details, visit our Privacy Policy and our Trust Point.

Disaster Recovery

We maintain comprehensive plans and procedures for disaster recovery and business continuity.

Transfers

In order to regulate the transfer of personal data between the Check Point entities, Check Point has adopted an intercompany agreement for transfers of data between its various Check Point entities, including the EU Standard Contractual Clauses and UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Check Point’s U.S. subsidiary, Check Point Software Technologies, Inc. (and its subsidiaries) has self-certified its compliance with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (DPF).

What Types Of Personal Data Does Harmony Email & Collaboration Process?

Harmony Email and Collaboration integrates with Microsoft 365, Google Workspace and other collaboration applications, collecting and processing data that customers have previously shared and stored within these platforms. This data may include:

Basic personal data, including name, job title, department/team, corporate email address and phone number.
Data extracted from subscribed mailboxes (including email’s subject line, body and attachments).
Data extracted from instant messages and files shared through apps connected to Harmony Email & Collaboration (such as teams, zoom and google).
URL addresses received in subscribed mailboxes. Such URLs are being scanned for threats detection before the user can click them. Check Point does not process these URLs’ actual landing destination content.
Users’ email usage pattern within subscribed mailboxes. Such pattern is being monitored in order to detect anomalies and prevent potential takeover threats. For example, Harmony Email & Collaboration monitors its users’ logging history, including typical sign-in times, email quantities, number of recipients and files, etc. No actual content of the mailbox is being monitored for the purpose of establishing users’ email usage pattern.
Activities performed by users within the Harmony Email & Collaboration dashboard, such as login time, duration of connectivity, etc.
Actions taken by administrators, which are fully logged.
Data provided through the Harmony Email & Collaboration’s dashboards and/or periodic reports. Such data is available to administrators and contains mostly aggregated data relating to blocked threats, but it may also contain personal data relating to certain users. For example, a report may contain a list of email addresses that experienced high numbers of potential attacks.

Why Does Harmony Email & Collaboration Process Data?

Harmony Email & Collaboration processes information to provide real-time prevention for email-based threats, as well as for threats found in collaboration tools and shared files. For customers purchasing Harmony Email & Collaboration extended archive service, Check Point may retain data for a duration of up to 10 years, as per the specific instructions provided by the customer. For more information on the purposes for which we process personal data, please visit our Privacy Policy.

What Is The Duration And Frequency Of Processing?

Personal data is shared with Harmony Email & Collaboration throughout the subscription term. Mailbox’s compound is being scanned upon onboarding to detect overlooked threats and assemble users’ usage patterns.

Retention

DATA TYPE RETENTION PERIOD

Unharmful Emails: 14 days
Quarantined Emails: 180 days
Email Metadata: 180 days Duration of subsection term + 3 months following the end of subsection End User's Basic Personal Data term, for the purpose of allowing the customer to renew the service.
Archive (additional paid add-on): Extended retention period of up to 7 years.

Where Is Personal Information Stored?

Personal information is stored on AWS Cloud Hosting Service. The hosting locations available are: United States, Europe, Australia, India, Canada, United Kingdom and United Arab Emirates. The location is selected per customer’s choice during the onboarding process.

Sub-Processors

Check Point engages third-party Sub-processors in connection with the provision of the Check Point’s products and services. The list of Sub-processors is available at our Sub-Processors Page.

Privacy Options

We provide the following tools, empowering our customers to select their data and privacy preferences:

Scoping the protected applications and users- Harmony Email & Collaboration allows administrators to select the protected applications and the users that will be monitored.
Restricting storage of emails content classified as harmful- Administrators may choose how to store emails classified as harmful – they can either choose to fully store, store obfuscated or partly, or not store at all.
Restricting users access to certain data, per customer’s choice.

Authorized Access To Personal Data

Customer Access

Access to data is controlled by Customer’s system administrator. Only users authorized by the administrator can access data. Every access and action by administrators and authorized users are fully logged.

Check Point Access

Data contained within the customer’s Harmony Email & Collaboration environment may be accessed by Check Point’s support and R&D teams for troubleshooting and security purposes. Such access is granted only to those authorized representatives for which the access is necessary to perform their intended functions.

Information contained in this data sheet is for awareness only, may be modified, and does not constitute legal or professional advice or warranty of fitness for a particular purpose. This Privacy Data Sheet is a supplement to Check Point’s Privacy Policy.