GDPR Readiness | Zoho ChemStudio

Zoho ChemStudio's GDPR Readiness

At Zoho, we take data privacy seriously. No scanning. No data mining. Nothing of that sort. From GDPR readiness to privacy-by-design practices, ChemStudio is built to help protect your research, formulas, and chemical data while giving you control over your information.

What is GDPR?

The General Data Protection Regulation (GDPR) is a regulatory framework designed to give individuals in the European Union greater control over their personal data. It defines how personal data should be collected, processed, stored, and deleted.

Although GDPR is an EU regulation, Zoho is committed to extending GDPR principles and privacy best practices to all ChemStudio users worldwide.

Personal data processing

ChemStudio provides security features that help organizations protect personal data and maintain appropriate access controls, including:

  • Two-factor authentication (2FA)
  • Role-based access controls
  • Activity logs

These features help administrators manage access to ChemStudio data while supporting organizational compliance requirements.

Our business model

ChemStudio is part of Zoho's portfolio of business and productivity applications.

Zoho has been a profitable, bootstrapped, privately held company for more than 20 years. Our products are funded through subscriptions, not advertising or data monetization.

Your chemical data belongs to you. We do not sell your data, analyze your research for advertising purposes, or monetize customer information.

Data protection by design

Privacy and security are built into ChemStudio from the ground up. We follow a privacy-by-design approach by implementing security controls throughout the product lifecycle to help protect customer data and support GDPR compliance.

Right to rectification (Article 16)

You can review and update your account information at any time. If you need assistance accessing, correcting, amending, or deleting your personal information, contact us at support@zohochemstudio.com or support@eu.zohochemstudio.com if you're in the EU.

Data security (Article 32)

ChemStudio protects customer data using industry-standard security practices, including encryption of data in transit and at rest, secure key management, and access controls.

For more information, see our Encryption documentation.

Right of access (Article 15)

You can request access to your personal data and verify how it is processed. Activity logs help provide visibility into actions such as sharing, modifying, exporting, and accessing ChemStudio documents.

Right to erasure (Article 17)

You can permanently delete your ChemStudio data when it is no longer needed. Organizations can also configure data retention policies to meet their internal governance and compliance requirements.