S3 Ltd

Dashlane Password Manager

Dashlane Password Manager is always private and secure. Our zero-knowledge patented encryption means not even we can see your passwords and passkeys. Protect more than your passwords with intuitive credential management for your whole organisation. Set, forget, and trust Dashlane to secure your people and data against breaches.

Features

• User-Friendly, Full SaaS Solution: Access & manage passwords everywhere
• Simple passwordmanagement across all devices (web browsers, iOS/Android)
• Browser. AD, SSO & SIEM Integration, SCIM Provisioning
• Secure data import/export with strongest master password requirements
• Unlimited Secure Password Generation & Sharing & passkeys
• One-click passwords & forms & enforced/built-in 2FA Policy
• Group management delegation, Phishing Alerts, Free friends/family plan
• Activity logs & advanced policies, Password Health Check, Scalable
• Darkweb monitoring & contextual breach alerts for ALL employees
• Bankgrade end-to-end encryption technology/Patented security architecture: AES 256bit encryption

Benefits

• Improved employee password hygiene
• Reduced risk from weak, shared or stolen credentials
• Always private, always secure: No-one sees your passwords
• Simple to deploy, easy to use, so great user adoption
• Quick deployment with your SSO
• Complete end to end protection for security across entire organisation
• Secure data including: financial, medical & private info
• Visiblity across 100% of employees: Early warnings & risk mitigation
• Proactive monitoring alerts employees about relevant data breaches
• Easy fixes for breached passwords

£10.03 a user a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tony.mason@s3-uk.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

825196895322183

Contact

Tony Mason
01628 362784
tony.mason@s3-uk.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Public internet required.
• System requirements: Up-to-Date Web Browsers and Allowed Browser Extension

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: You have a dedicated customer success manager available during normal business hours. You have email support always at support.dashlane.com Ref status & priority support tickets, your dedicated customer success manager will be your point of escalation.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Dedicated customer success manager, sales engineer and general support team.; https://support.dashlane.com/hc/en-us/articles/4516905332370-Get-help-with-Dashlane
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: 1. Customers purchasing Dashlane can benefit from:; Streamlined processes for adding or removing users, especially important in larger organisations. SCIM.; 2. User Training Programs: Comprehensive training programs to educate users about secure password practices and features of the vault.; 3. Feedback Mechanism: A system for users to provide feedback on the tool for continuous improvement.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Yes: Each user has the ability to export their own vault
• End-of-contract process: Included: Each user has the ability to export their own vault.; Note that for security purposes only the validated Account owner can delete the account (Dashlane can’t do it for you); https://support.dashlane.com/hc/en-us/articles/202907531-Delete-your-Dashlane-account-and-data

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Dedicated ios and android app
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Dashlane is a web browser extension. Users sign into the extension, and Dashlane will automatically fill/save/generate passwords. Users can also access app.dashlane.com for more granular vault management. ; ; https://support.dashlane.com/hc/en-us/articles/4679936285458-What-is-Dashlane
• Accessibility standards: None or don’t know
• Description of accessibility: ADA compliant
• Accessibility testing: YES - https://www.dashlane.com/accessibility-statement
• API: Yes
• What users can and can't do using the API: API is command line interface (CLI) and SEIM integration.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Modifications can be made to extension (auto-fill, company logo, etc.)

Scaling

• Independence of resources: There are unlimited passwords & unlimited shares. Served on AWS ensures scalability.

Analytics

• Service usage metrics: Yes
• Metrics types: Activity Log in Admin Panel, CSV export and SEIM Integration with Splunk.
• Reporting types:
  • API access
  • Real-time dashboards

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Dashlane

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Export to CSV or “.DASH” file
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.7% uptime - https://www.dashlane.com/terms
• Approach to resilience: AWS hosted with multiple redundant datacentres more than 100 miles apart
• Outage reporting: Status.dashlane.com

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Yes - https://support.dashlane.com/hc/en-us/categories/360000606839-Logins-Data; ; https://support.dashlane.com/hc/en-us/categories/360000606740-Account-Security
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Available at trust.dashlane.com Schellman Compliance, LLC
• ISO/IEC 27001 accreditation date: Available at trust.dashlane.com - October 13, 2023
• What the ISO/IEC 27001 doesn’t cover: The scope of the ISO/IEC 27001:2022 certification is limited to the information security management system (ISMS); supporting the assets, technologies and processes employed by Dashlane for processing, management, and delivery of; password manager services to its customers. Additionally, the scope is defined with consideration of the external and; internal context of the organization, requirements of interested parties, such as customers and regulatory bodies, and; boundaries with third parties, in accordance with the Statement of Applicability, version 3.0, dated October 13, 2023.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • https://trust.dashlane.com
  • SOC 2 Type II
  • GDPR
  • CCPA

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: ISO/IEC 27001

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: A Robust Change management is in place and is the reason many choose Dashlane. See Soc II Report
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Vulnerability manangement is in place. See Soc II Report
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Monitoring tools are in place. See SOC II Report
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Incident management is in place. See SOC II Report

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Equal opportunity

  Equal opportunity

  Dashlane are an equal opportunity company; https://www.dashlane.com/about/careers; Diversity, Equity, Inclusion and Belonging at Dashlane:; ; As a truly international company—founded in France and distributed across France, US and Portugal—Dashlane thrives off diverse perspectives. We value all aspects of diversity: gender identity, sexual orientation, ability, ethnic origin, social background, age, lifestyle, and more. We are committed to hiring a diverse community and fostering a culture where everyone is heard and belongs.

Pricing

• Price: £10.03 a user a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: 2 week free trial available via Security Software Solutions Ltd; sales@s3-uk.com
• Link to free trial: Sales@s3-uk.com

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tony.mason@s3-uk.com. Tell them what format you need. It will help if you say what assistive technology you use.