Security and compliance

Your sales data is strategic. We treat it that way

Your data stays in France, encrypted in transit and at rest, under a GDPR framework you can audit.

Hosted in France

GDPR compliant

ISO/IEC 27001-certified hosting provider

TLS 1.3 encryption

Security

Compliance

Protection at every layer

TLS 1.3 encryption

All communications between the browser and our servers are encrypted using TLS 1.3.

01

AES-256 encryption at rest

Stored data is encrypted with AES-256.
‍

02

SSO & SAML authentication

Native integration with your identity provider through SSO and SAML protocols.

03

Multi-factor authentication

MFA is available and recommended for all platform access.

04

Granular access control

Access is controlled by role, team, territory, and data level.

05

Auditable access logs

Actions are logged and archived, and the full history is available for your audits.

06

99.9%

Availability

Our solutions have run at 99.9% monthly availability. The infrastructure is monitored around the clock by our teams and by automated tools.

View status

Documents available upon request

DPA template

DPA template

A data processing agreement ready to complete.

Request the document
Business continuity plan

Business continuity plan

How we keep the service available.

Request the document
Information security policy

Information security policy

The framework that governs how we protect your data.

Request the document
Person with curly hair in a blue shirt typing on a black laptop.
Man wearing glasses working on a laptop at a wooden table.
Black hand wearing a ring typing on a white keyboard on a wooden desk.
Woman with glasses in a blue shirt talking and gesturing with her right hand raised.
Man with curly hair and a beard looking down intently.
Asian man in a grey sweater looking intently at something off-frame.

Have a question about security or compliance?

Our DPO will respond directly.

Contact the DPO

Frequently asked questions about security

Your data is hosted in France, with an ISO/IEC 27001-certified provider, on infrastructure operated under European law.

Yes. Datakiss processes personal data under the GDPR, with technical and organizational measures appropriate to the risk.

Your data is returned to you in a usable format and then deleted from our systems.

Access is limited to operations and support, and every access is logged and auditable.