# Security Practices, Controls and Encryption | Dedupely > How Dedupely secures CRM data in transit and at rest, the access controls around it, the certifications behind them, and who to ask for all the evidence. - URL: https://dedupe.ly/it/legal/security - Section: legal - Site index: https://dedupe.ly/llms.txt - Any page: append `.md` to its URL for this plain-text form --- [Legal and Security](https://dedupe.ly/security) ## Our Security Explore the data protection measures in place, including encryption, audits, and adherence to security standards. # min read [Download pdf](https://cdn.dedupe.ly/ws-pub/8182912f1d5f1649.pdf) ### Table of contents Share ### Data Locations Our app infrastructure is securely hosted on leading platforms like Google Cloud Platform (GCP) and Amazon Web Services (AWS) within U.S. regions. This ensures that your information is protected by industry-leading security measures, providing you with reliable and trustworthy service. Apart from ISO 27001, our use of these platforms abide closely to NIST, CISA, PCI and other security standards to ensure that your data is secure and protected at all times. ### Privacy & Security by Design We prioritize the security and privacy of your data from the ground up. Our platform is built with Security and Privacy by Design principles, ensuring data protection measures are integrated into every aspect of our system. From secure data storage and encrypted communications to strict access controls and regular security audits, we are committed to safeguarding your information. Your privacy is our top priority, and we continuously work to exceed industry standards, giving you peace of mind while using our services. ### External Security Audits We conduct regular security audits and assessments to ensure that our platform meets the highest security standards. Our team works with leading security experts to identify potential vulnerabilities and address them promptly. By conducting external security audits, we can identify and mitigate risks proactively, ensuring that your data remains secure at all times. We also conduct regular penetration testing to identify potential security weaknesses and address them before they can be exploited. By conducting penetration testing, we can identify and address vulnerabilities that could pose a risk to your data, ensuring that your information remains secure. #### Astra Pentest Certificate Dedupely has been audited by Astra Security and has passed their panel of penetration testing experts. You can view our certificate here: ### Subprocessors & Third Party Apps We work with third-party apps, integrations and services that are GDPR compliant, hold IT security certifications and have a well established reputation in the industry. Dedupely sends a newsletter when a there is a change or addition of subprocessors that handles personal data of our customers’ data. You can see our list of subprocessors [here](https://dedupe.ly/trust#subprocessors). ### Zero Trust We adhere to a Zero Trust security model, which means we don't automatically trust any entity inside or outside our network. Instead, we verify every request as though it originates from an open network. This approach ensures that all users and devices must be authenticated, authorized, and continuously validated before accessing resources. By implementing Zero Trust, we enhance the protection of your data and minimize risks at every level. ### Team Security Our team is well-trained in daily privacy practices, GDPR compliance, IT security, and data privacy standards. We ensure that all team members use pre-approved software, which keeps all data secure, controlled, and encrypted, safeguarding your information at every level. ### Vulnerability Disclosure We are committed to transparency and compliance with legal obligations regarding data breaches and security issues. In the event of a breach, we promptly investigate and notify affected customers within one business day via email, ensuring that you are informed and protected. ### More Information If you want to learn more about our security procedures or have a question please email us. ### Security documents Stay updated with our latest articles and insights. [Privacy Policy This page explains how personal information is collected, used, and disclosed to ensure your data remains protected.](https://dedupe.ly/legal/privacy-policy) [Terms of Service Learn about the terms that define the use of this service, fostering transparency and mutual understanding.](https://dedupe.ly/legal/terms-of-service) [Our Security Explore the data protection measures in place, including encryption, audits, and adherence to security standards.](https://dedupe.ly/legal/security) [Subprocessors View the trusted partners we work with to deliver secure, transparent, and reliable data services.](https://dedupe.ly/trust#subprocessors) [ISO 27001 Dedupely is ISO 27001 certified.](https://dedupe.ly/legal/iso-27001) [DPA Understand the compliance measures taken to ensure the safe and lawful handling of personal data.](https://dedupe.ly/legal/dpa) ### We love to customer service That's why we offer unlimited support. #### Submit a ticket You can submit a support ticket by emailing us. Our team will respond as soon as possible. Email copied! help@dedupe.ly #### Human Live Chat Get instant help with our human live chat. Mon-Fri, 9-5 CST. Enter our support chat #### Zoom Support We offer unlimited video call support. Whether you’re getting started or getting intense. [Book a zoom](https://meetings.dedupe.ly/meetings/hampus-isaksson/dedupely-zoom-schedule) ### Get started for free 20 free trial merges and as much free support as you need to get your duplicates under control. [Talk to sales](https://meetings.dedupe.ly/meetings/hampus-isaksson/dedupely-zoom-schedule)[Try for free](https://v2.app.dedupe.ly/signup) [Or sign up with Google](https://v2.app.dedupe.ly/signup/google) Running CRM cleanup for clients? [See the Partner Program](https://dedupe.ly/become-a-partner) Skip to content [New Dedupely Intelligence AI deduplication that finds what your rules miss.](https://dedupe.ly/ai-deduplication)