Snapshot 122202
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
We’ve completed our CSA STAR self-assessments, including STAR for AI Zuddl Trust Center Start your security review View & download sensitive information Ask for information Zuddl Trust Center Security Overview At Zuddl, security is built into every layer of our platform. We follow a secure-by-design approach, embedding security controls across infrastructure, application development, and operational processes. Infrastructure Security Our platform is hosted on secure cloud infrastructure with strong network controls, encryption, and continuous monitoring to protect against unauthorized access. Application Security We implement a Secure Software Development Lifecycle (SSDLC) that includes secure coding practices, code reviews, automated security testing, and dependency scanning to identify and remediate vulnerabilities early. Access Control Access to systems and data is restricted based on the principle of least privilege. We enforce role-based access controls (RBAC), Single Sign-On (SSO), and multi-factor authentication (MFA) for critical systems. Monitoring & Detection We maintain centralized logging and real-time monitoring to detect suspicious activities. Security events are continuously monitored and investigated. Security controls are continuously validated through automated scanning, monitoring, and periodic third-party assessments. Incident Response We have a formal incident response process to quickly identify, contain, and remediate security incidents, with defined communication and escalation procedures. Data Privacy We are committed to protecting personal data and supporting global privacy regulations. Our privacy program is designed to ensure transparency, accountability, and user control over personal data. Customer data is retained only for the duration of the contract and a defined retention period, after which it is securely deleted. Data Protection Principles Data minimization and purpose limitation Encryption of data in transit and at rest Strict access controls and monitoring Data Subject Rights We support user rights under applicable privacy regulations. Under GDPR, these include the right to access, rectify, delete, restrict processing, port data, and object to processing. Under CCPA/CPRA, these include the right to know, delete, correct, opt-out of sale/sharing, limit use, and non-discrimination. For specific rights applicable to your jurisdiction, please refer to our Privacy Policy or contact privacy@zuddl.com. Cross-Border Data Transfers We implement appropriate safeguards, including Standard Contractual Clauses (SCCs), to ensure lawful and secure international data transfers. Subprocessors are reviewed periodically and monitored for compliance with security and privacy requirements. Compliance CSA STAR AI Level 1 CCPA CSA STAR Level 1 GDPR ISO/IEC 27001:2022 ISO/IEC 27701:2019 SOC 2 Type 2 Documents COMPLIANCESOC 2 Type 2 COMPLIANCEISO/IEC 27001:2022 COMPLIANCEISO/IEC 27701:2019 LEGALData Processing Agreement DOCUMENTSPentest SELF-ASSESSMENTSCSA STAR for AI Level 1 (Self-Assessment) SELF-ASSESSMENTSCSA STAR Level 1 (Self-Assessment) SELF-ASSESSMENTSVSA Core SELF-ASSESSMENTSVSA Full LEGALAI Terms of Use AI AI Overview AI Training Data and Bias AI Security View more Risk Profile HostingMajor Cloud Provider Recovery Time Objective60 minutes Recovery Point Objective24 hours View more Self-Assessments CSA STAR for AI Level 1 (Self-Assessment) CSA STAR Level 1 (Self-Assessment) VSA Core View more Product Security Audit Logging Data Security Integrations View more App Security Responsible Disclosure Application Penetration Testing Code Analysis View more Data Security Access Monitoring Data Asset Classification Encryption-at-rest View more Reports Data Flow Diagram (DFD) Network Diagram Pentest Report View more ESG Anti-Modern Slavery Code of Ethics Legal Subprocessors Data Processing Agreement AI Terms of Use View more Data Privacy Cookies Data Breach Notifications Data Into System View more Access Control Access Log Management Acceptable Use Policy Data Access View more Infrastructure Status Monitoring Anti-DDoS Environment Segregation Endpoint Security Anti-Malware Disk Encryption DNS Filtering View more Network Security Bot Detection Data Loss Prevention Distributed Denial of Service Protection (Anti-DDoS) View more Corporate Security Asset Management Practices Email Protection Employee Handbook View more Policies Access Control Policy AI System Development and Evaluation Policy Anti-Malicious Software Policy View more Security Grades Qualys SSL Labs SSL Labs A+ Incident Response Designated Response Personnel Security Operations Center (SOC) Risk Management Data Access/Impact Levels Risk Assessments Third-Party Dependence Asset Management Asset Classification Asset Inventories (Hardware/Software) Asset Tracking View more BC/DR Alternate Processing/Storage Site Business Continuity Management System (BCMS) Business Continuity Plan (BCP) View more Training Employee Privacy Training Phishing Training Secure Development Training View more Change Management Change Management Program Change Restrictions Impact Analysis View more Physical & Environment Access Monitoring Physical Access Security Visitor Control Continuous Monitoring Automated Alert Response Automated Compliance Monitoring Data Loss Prevention System (DLP) View more Subprocessors Knowledge Base (FAQ) How does Zuddl protect data through encryption? Is my data encrypted when sent to AI providers? What is Zuddl's incident response process? What tools are used for vulnerability detection? How are user access and authentication managed? View more Zuddl Trust Center Updates We’ve completed our CSA STAR self-assessments, including STAR for AI General We’ve just completed two Cloud Security Alliance (CSA) STAR self-assessments, and we wanted to share them with you. CSA STAR Level 1: We’ve updated our full Consensus Assessments Initiative Questionnaire (CAIQ v4.1). It covers how we protect your data across 17 security domains, from encryption and access control to incident response and business continuity. It replaces our earlier CAIQ Lite and goes into much more detail. CSA STAR for AI Level 1: We’ve also completed the new AI-CAIQ, which covers how we build, run and govern the AI features in Zuddl, including how we handle your data, which models we use, and where people stay involved in AI decisions. We answered every question honestly, including the few where we don’t yet do what the control describes. We think that’s more useful to you than a perfect score. You can find both questionnaires in the Self-Assessments section of our Trust Center, and on the CSA STAR Registry. Questions? Reach us at security@zuddl.com. Check that the AI-CAIQ is live on the CSA registry before you post this. If it’s still under review, change the second-to-last paragraph to say it will appear on the registry once CSA’s review is complete. ISO Compliance We are pleased to share that our latest ISO 27001:2022 and ISO 27701:2019 surveillance audit certifications are now available through our Trust Center. The audits confirm our continued compliance with international standards for information security management and privacy information management. Both certifications were renewed. ISO/IEC 27001:2022 covers our information security controls across infrastructure, applications, access management, incident response, and business continuity. ISO/IEC 27701:2019 covers our privacy management practices, including personal data processing, data subject rights, cross-border transfers, and privacy-by-design principles. Authorised customers and prospects can access the updated certificates and audit details through our Trust Center. We appreciate the trust our customers place in us and remain committed to maintaining the highest standards of information security, privacy protection, and regulatory compliance. New SOC 2 Type II Report Available Compliance We are pleased to share that our latest SOC 2 Type II report is now available through our Trust Center. The audit covers the Security, Availability, and Confidentiality Trust Services Criteria and reflects our ongoing commitment to maintaining a strong security and compliance program. Authorised customers and prospects can access the updated report through our Trust Center. We appreciate the trust our customers place in us and remain committed to maintaining the highest standards of security, availability, and confidentiality. If you need help using this Zuddl Trust Center, please contact us. Contact support If you think you may have discovered a vulnerability, please send us a note. Report issue