Custellence security follow the highest security and privacy standards

As a provider trusted by highly-regulated industries like financial services, insurance, and medtech worldwide, Custellence security and privacy is dedicated to continuously meeting and exceeding data protection standards and regulations. We strive to ensure that our security practices not only comply with but also surpass the highest industry benchmarks.

Trusted by 2.000+ CX experts around the world

We have a culture of data security and privacy

Your privacy and the safety of your data are our highest priority. Therefore, we are continuously working on maintaining and improving our robust Custellence security culture to ensure that everyone in our organization always keeps our customers' security top of mind in all their actions.

Our commitment to compliance

Custellence continuously monitors and stays up to date with the latest legal frameworks, industry standards, and technical requirements on data security and privacy to ensure full compliance with privacy laws such as GDPR and beyond.

Custellence security measures

You can trust that all data we manage is encrypted in transit and at rest, that passwords are hashed and salted, and accounts are verified. We employ secure coding practices, code reviews, automated security testing and more. Our employees and contractors have signed contracts including a confidentiality clause and receive Custellence security training at the start of employment and continuously as needed.

SOC 2 Type II Certification

As a proof of our commitment to maintaining the highest information security and operational excellence, we have completed a SOC 2 Type II audit. Being certified indicates that Custellence's systems and controls have been rigorously evaluated and meet the stringent requirements set by the American Institute of CPAs (AICPA). The detailed SOC 2 Type II report is available upon request for customers seeking to verify the company's compliance.

Customizable SLO and SLA

For our Professional customers, we offer Single Sign-On (SSO) integration with Microsoft Entra using OpenID, along with a detailed Service Level Agreement (SLA). If your organization uses SSO solutions other than Azure or requires specific security measures, we can customize your Enterprise plan. Our responsible Custellence security team will work closely with you to ensure seamless, secure integration and provide ongoing assistance.

Our vendors

Chosen with care

We do not host data centers ourselves, instead we have carefully selected industry-leading vendors that hold the toughest certifications to keep your data safe. They are all certified with SOC 2 and ISO27001 for processing and storage of data. All our third party vendors also use data centers with these certifications.

Secure payment

We use Stripe for all online payments, which means we do not store any payment information ourselves. Stripe is one of the world’s largest online payment services and holds PCI DSS Level 1 certification, which is the highest level to be achieved in this area. For our Enterprise plans, we offer invoice.

Control and insights and Custellence security right in the platform

Advanced access control

In Custellence you can manage both members and guests. You can change their role to restrict what they can do in the workspace and manage all users that are not in your workspace but have access to any maps in the workspace.

Map sharing rights

If you have many maps and would like to be able to set different access rights for your team members, our paid plans offer advanced sharing options. For example editing rights for selected members, and view-only for others. You can also set other advanced sharing options, such as passcode protected link and domain sharing.

Audit logs

Keep track of the activity in your workspace. You can easily see who has done what in your workspace and on journey maps. To get notified of changes in specific maps, just choose “follow” and you’ll get notified regularly on the activity.

Our data information and Custellence security policies

Security policy

How we offer enterprise-grade security and operations.

Privacy policy

How we protect your data and help you meet global privacy obligations.

The cookie policy

How we use cookies and other tracking technologies.

Responsible disclosure

How to perform pen-tests and report security issues to us.

Subprocessors list

Read about the third-parties that process our customer data.

Your customers are your business

Custellence help you ensure that both succeed.