Data protection

Manage the personally identifiable data for respondents and company employees and also records at the company level

Medallia Experience Cloud collects and maintains personally identifiable data for respondents (survey takers) and users (company employees) including, but not limited to name, email address, and phone number.

Personal data

To help ensure personal privacy and to comply with government regulations — including the European Union's General Data Protection Regulation (GDPR), the California Consumer Protection Act (CCPA), and others — Experience Cloud provides features for erasing personal data, including:

  • Personal data retention policy to erase personal data from import, upload, and event files after a period of time..

  • Masking of sensitive fields to hide data from unauthorized viewing.

  • Encryption of data so only authorized parties can access it.

Company data

Additionally, to provide the means to specify the data retention policies (retention time by record status) appropriate for companies, Experience Cloud provides features for erasing company data, including:

  • Company data retention policy to to provide an automated way of deleting survey records from Experience Cloud after a certain time has elapsed since their creation.