Snapshot 179064
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Home Security Technical details Start with the security overview. Read about data management, encryption and infrastructure in our developer documentation. Read security documentationContact our security team Security and privacy at Candu Your users’ data never takes a back seat. Candu is designed and operated to meet the security, privacy and availability requirements of modern SaaS teams. Contact our security team Why Candu Built to scale, designed to stay up. Built for scale Candu uses AWS infrastructure with redundancy and monitoring to support availability. Global performance Content is served from Cloudflare + S3 CDNs so it loads in parallel with your own assets—no blocking requests, no layout shift. Resilient by design The Candu SDK fails open: if our service is unreachable, your page still renders and records zero blocking errors. READY FOR ANYTHING Enterprise-ready security Encryption Encryption for data in transit and at rest. Role-based access controls Fine-grained roles and SSO/SAML support. Least-privilege model Production data accessible only to on-call engineers. Incident response 24×7 monitoring, <30-minute pager duty, and post-mortems shared on request. Data segregation Tenant data is logically isolated by Account ID; per-tenant AES-256 keys in AWS KMS keep every workspace cryptographically separate. Uptime Service-level commitments are set out in your agreement with Candu. Privacy & compliance GDPR / CPRA ready: no sale or share of personal data, EU storage by default, and DPA + 2021 SCCs available for every customer. Staged SDK releases Every SDK build graduates from staging → canary → GA. HOW it works Architecture The lightweight JS SDK runs in your page, fetches UI blocks from our CDN, and sends usage analytics straight to our EU-hosted data plane. Protection Privacy & Compliance Candu processes customer personal data on your behalf under our DPA. The agreement sets out processing instructions, sub-processor requirements, security measures, and return or deletion of data. Read the DPA. Terms of UsePrivacy Policy faqs Frequently asked questions Where is data stored? Candu stores customer data on AWS in the EU. Contact our security team for the data-residency details relevant to your review. How long do you retain data? Our DPA explains when customer data is returned or deleted, including legal-retention and isolated-backup exceptions. See Section 10 of the DPA. Is traffic encrypted? Candu uses HTTPS for data in transit and encryption for stored data. Our security team can provide the details needed for your review. What’s your SLA? SLA terms are set out in your agreement with Candu. Contact our team to confirm the commitments that apply to your plan. Do you sell personal data? No. Candu processes customer personal data on the customer’s behalf as a processor or service provider. Our DPA describes the permitted processing and disclosures. How do you handle data-subject requests? Email [email protected]. We help customers respond to privacy requests under the DPA and applicable law. Which sub-processors do you use? See the Candu Sub-processors list linked from our DPA. Section 5 explains the terms for engaging and changing sub-processors. Will Candu slow down my page? The SDK loads asynchronously and serves published content through a CDN. Performance depends on your content and host application; test your experience in staging before publishing. More questions? Contact our Security team. Contact Security Turn your ideas into UX today Get a custom walkthrough of Candu Start free trial