Zuddl Trust Center
Security Overview
At Zuddl, security is built into every layer of our platform. We follow a secure-by-design approach, embedding security controls across infrastructure, application development, and operational processes.
Infrastructure Security
Our platform is hosted on secure cloud infrastructure with strong network controls, encryption, and continuous monitoring to protect against unauthorized access.
Application Security
We implement a Secure Software Development Lifecycle (SSDLC) that includes secure coding practices, code reviews, automated security testing, and dependency scanning to identify and remediate vulnerabilities early.
Access Control
Access to systems and data is restricted based on the principle of least privilege. We enforce role-based access controls (RBAC), Single Sign-On (SSO), and multi-factor authentication (MFA) for critical systems.
Monitoring & Detection
We maintain centralized logging and real-time monitoring to detect suspicious activities. Security events are continuously monitored and investigated.
Security controls are continuously validated through automated scanning, monitoring, and periodic third-party assessments.
Incident Response
We have a formal incident response process to quickly identify, contain, and remediate security incidents, with defined communication and escalation procedures.
Data Privacy
We are committed to protecting personal data and supporting global privacy regulations. Our privacy program is designed to ensure transparency, accountability, and user control over personal data.
Customer data is retained only for the duration of the contract and a defined retention period, after which it is securely deleted.
Data Protection Principles
Data minimization and purpose limitation
Encryption of data in transit and at rest
Strict access controls and monitoring
Data Subject Rights
We support user rights under applicable privacy regulations. Under GDPR, these include the right to access, rectify, delete, restrict processing, port data, and object to processing. Under CCPA/CPRA, these include the right to know, delete, correct, opt-out of sale/sharing, limit use, and non-discrimination. For specific rights applicable to your jurisdiction, please refer to our Privacy Policy or contact privacy@zuddl.com.
Cross-Border Data Transfers
We implement appropriate safeguards, including Standard Contractual Clauses (SCCs), to ensure lawful and secure international data transfers.
Subprocessors are reviewed periodically and monitored for compliance with security and privacy requirements.
Subprocessors
- How does Zuddl protect data through encryption?
- What is Zuddl's incident response process?
- What tools are used for vulnerability detection?
- How are user access and authentication managed?
- What certifications do your AI providers have?
Zuddl Trust Center Updates
New SOC 2 Type II Report Available
We are pleased to share that our latest SOC 2 Type II report is now available through our Trust Center.
The audit covers the Security, Availability, and Confidentiality Trust Services Criteria and reflects our ongoing commitment to maintaining a strong security and compliance program.
Authorised customers and prospects can access the updated report through our Trust Center.
We appreciate the trust our customers place in us and remain committed to maintaining the highest standards of security, availability, and confidentiality.
ISO
We are pleased to share that our latest ISO 27001:2022 and ISO 27701:2019 surveillance audit certifications are now available through our Trust Center.
The audits confirm our continued compliance with international standards for information security management and privacy information management. Both certifications were renewed.
ISO/IEC 27001:2022 covers our information security controls across infrastructure, applications, access management, incident response, and business continuity.
ISO/IEC 27701:2019 covers our privacy management practices, including personal data processing, data subject rights, cross-border transfers, and privacy-by-design principles.
Authorised customers and prospects can access the updated certificates and audit details through our Trust Center.
We appreciate the trust our customers place in us and remain committed to maintaining the highest standards of information security, privacy protection, and regulatory compliance.