Snapshot 206426

Document
Security page
URL
https://www.nutshell.com/security
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
705738 bytes
SHA-256 (raw)
c23e09c4b480eae8aead988642bad0294024cd0d713ab49d89ab35d250829e65
SHA-256 (normalized text)
3f8406b78049dcae92347728485aab18ae820c9e66ce055820afde98203375b8

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Explore features
SOC 2 Attested Data Protection
Your data is secure and protected
Nutshell has received a successful SOC 2 Type 1 audit.
The SOC 2 Type 1 examination is designed for organizations of any size, regardless of industry and scope, to ensure the personal assets of their potential and existing customers are protected. SOC 2 reports are recognized globally and affirm that a company’s infrastructure, software, people, data, policies, procedures and operations have been formally reviewed.
Visit our Trust Center or our Data Processing Addendum to learn more.
Your data is always encrypted
We use bank-grade, 256-bit TLS 1.2 or higher encryption every time you access your Nutshell account, whether it’s via the web or our mobile applications. And your data is encrypted at rest in our databases, ensuring it’s protected at all times.
We conduct continuous backups
All data is immediately replicated to multiple servers, and we take daily, weekly, and monthly snapshots of the data for backup purposes. Third-party monitoring services immediately page our team if an issue is detected. In addition, you can visit status.nutshell.com to see live Nutshell availability updates.
All financial data is protected
We use a PCI-compliant provider to securely store your billing and financial information. Information related to your credit card is not stored on our servers, adding an additional layer of protection for your financial data.
We ensure secured passwords
Passwords are encrypted one way and cannot be accessed by Nutshell staff. That means that only you have access to your unique password and that no one else can log into your account unless you share your password with them.
Nutshell also supports SAML-based single sign-on (SSO) and directory sync (DS) for increased password protection, available to Sales Enterprise customers. Enable secure SSO.
Our CASA assessment was a success
We successfully completed a Cloud Application Security Assessment (CASA) assessment for our web application, validating that we meet the security requirements set out by the App Defense Alliance (ADA).
The requirements include alignment with industry-leading security frameworks and a lack of findings linked to common weakness enumerations (CWEs) with high or medium risk of exploitation.
See Nutshell in action!
Try Nutshell free for 14 days or let us show you around before you dive in.
free trial contact sales
Important information for your CRM cybersecurity team
Looking for more detailed information about how Nutshell keeps your business and customer data safe? If you’re on your company’s data or cybersecurity team, a network administrator, or a CRM manager, the following Nutshell data security information may be helpful to you.
Network security
Our engineering team has experience managing petabytes of data securely and durably. We take the following steps to keep your data secure at rest and as it transits networks.
Firewalls, VPNs, modern Linux operating systems, conservative network and security group configuration
Encryption at rest
VPNs to secure employee access and encrypt all data that transits Internet links
Nutshell passwords are salted and one-way hashed. Our staff cannot access or see your password
Login pages are protected against brute-force attacks
We follow industry security lists and promptly patch critical issues (we patched Heartbleed within hours)
We use a multi-tenant data storage architecture. Customer data is stored in discrete silos per account to isolate and protect your data
Operational security
Our support team is based in-house with our Ann Arbor engineering team. We will only access your account with your permission to troubleshoot support issues. Staff will never ask for your Nutshell password.
All staff computers run with full-disk encryption and strong passwords
We limit our internal network’s exposure to Windows
Every Nutshell employee receives a copy of 1Password on their first day
Offices are secured with individual keycard access
Financial security
We ensure that any credit card and billing information related to your Nutshell account is stored securely. Our billing provider is PCI-compliant and managed separately from Nutshell application systems.
Password protection
Nutshell uses one-way hashing to securely store a representation of your password. We cannot retrieve your password for you—you must use our forgotten password tool in conjunction with your email address to recover your password. As a result, it’s important to note that keeping your Nutshell email address information up-to-date is your responsibility.
The onus of choosing secure passwords also lies in your hands to ensure your passwords are kept safe and that access to your account is protected. Nutshell can’t be held responsible for compromised data due to an insecure or stolen user password. If you make use of third-party authentication, such as through Google Apps, those passwords will also need to be secured.
Nutshell also supports SAML-based SSO and DS for Sales Enterprise customers, enabling your team to log into Nutshell with one set of credentials managed by your IT team. Learn more about SSO and DS in Nutshell.
Responsible disclosure
If you’re a security researcher or you believe you’ve encountered a problem in Nutshell’s security, we urge you to review the following notes:
Nutshell does not offer a bug bounty program to pay for reports.
Please report any security concerns to [email protected]. If you need to send an encrypted message, you can find it on Keybase.
We ask that you give us a reasonable amount of time to respond to reports before making information public.
Please do not conduct any security research that could result in the destruction of data and interruption or degradation of service. This includes the use of automated tools or scanners—these are likely to result in your IP address being banned.
We don’t accept responsible disclosure reports related to the following issues:
Iframe/UI redress issues related to X-Frame-Options headers
HSTS implementation
User-provided password strength
SPF, DKIM, and DMARC configuration issues
User enumeration issues (we utilize rate limiting to protect our users)
The presence of banner or version information
Register for a product tour!
Have a question? Need to see more? Register for a free 30-minute Nutshell demo and product tour with one of our team members to determine if Nutshell is a match for your business.
Register Now
CRM features that boost your sales effectiveness
Sales automation
Put time-wasting tasks on autopilot so your team can focus on building relationships and nurturing leads through your sales pipeline.
Learn more
Pipeline management
Create custom pipelines and manage them easily with multiple views to nurture leads efficiently and stay on top of every deal.
Learn more
Reporting & analytics
Provides robust reporting and analytics to help you track your team’s performance and to help you gain quick insights with automated reporting.
Learn more
Calls & meetings
One-click calling, AI call summaries, AI next steps, and easy scheduling.
Learn more
Email automation
Increase sales efficiency with Nutshell’s powerful email automation tool. Create personalized campaigns & track success right in your CRM
Learn more
Artificial intelligence
Streamline daily processes using the generative power of AI in Nutshell to simplify sales activities and open up a world of possibilities.
Learn more
Meeting scheduler
Create and manage virtual meetings and sync the information with your Calendar without leaving your CRM.
Learn more
Proposals & Invoices
Quickly create, send, track, and get signatures on custom quotes, invoices, and contracts directly from Nutshell.
Learn more
Team collaboration
Store customer notes, interactions and easily bring colleagues into the conversation and stay notified of everything that needs your attention.
Learn more
AI agents
Easily accelerate revenue-driving tasks in your CRM, so you and your team can spend more time on selling.
Learn more
Contact management
Improve calendar, email, & contact organization from any source with Nutshell’s contact management software.
Learn more
Product Importer
Quickly import your entire products and services list with Nutshell’s Product Importer, so you and your team can spend less time on administration and more time on selling.
Learn more
Prospecting
Search through over 200 million contacts, add ideal customers to your CRM, and connect with your future buyers.
Learn more
Website visitor identification
Pinpoint the companies and individuals visiting your site so you can proactively target warm leads.
Learn more
Contact enrichment
Locate specific individuals working at the companies in your book of business and reveal their contact information so you can start the conversation.
Learn more
Lead attribution
With channel and source data automatically added to your new leads, you can know where your best leads come from and invest smarter in your marketing.
Learn more
Free customer support
Connect with our world-class support team to get fast, friendly, and free support when needed.
Learn more
Email and calendar sync
Easily sync your email and calendar with Nutshell to make your CRM work where you do.
Learn more
Security
We take the security and reliability of your data seriously. We partner with the industry’s most trusted infrastructure provider, Amazon Web Services.
Learn more
App Marketplace
Integrate Nutshell with the rest of your tech stack
Learn more
See Nutshell’s Marketing features
Find out more about Nutshell’s extensive range of Marketing Suite features
Explore Marketing features
See Nutshell’s Engagement features
Learn more about Nutshell’s industry-leading Engagement Suite features
Explore Engagement features
See all of Nutshell’s features
Discover the broad spectrum of features and tools available to Nutshell customers
Explore all features
Need a user-friendly CRM to boost sales and team efficiency?
Take our guided tour to explore Nutshell’s incredible features!
EXPLORE NUTSHELL’S FEATURES
CRM data security FAQs
1. What is data security in CRM?
Data security describes a process that involves several components and actions to keep your CRM data secure and private. The process protects data against unauthorized third-party access, malicious cyber attacks, and the exploitation of your contact, business, and financial data.
2. Why is CRM data security essential?
CRM data security is essential for several reasons, one of which is that any organization that stores and processes private and sensitive customer data is legally obligated to protect it from unauthorized access or loss. Effective CRM cybersecurity ensures your contact data and business information stay safe and secure.
3. What are the key components of a secure and reliable CRM system?
There are several security components your CRM provider should provide, including (but not limited to):
Data encryption
Malware protection
Data management
Data auditing tools
Data reporting tools
Consent management
Password protection
Compliance with data privacy standards
Transparency regarding how stored and processed data is protected
4. Do you encrypt data at rest?
Yes, data stored in Nutshell is encrypted at rest via controls in our AWS infrastructure.
5. Where are your servers located?
Nutshell’s infrastructure is primarily located in the United States on the AWS platform. Some processing may happen in other countries through subprocessors.
6. Do you support Single Sign-On (SSO)?
Yes, Nutshell supports Google and Microsoft sign-in on every plan, and that SAML SSO and SCIM directory sync are on Enterprise only.
Load More
Acknowledgments
We’ve received disclosures from many individuals and organizations to make Nutshell a more secure place.
Read about them here
From email integration and contact management to sales automation and reporting, it has everything I need to streamline my workflow and improve productivity. I particularly appreciate the seamless integration with other tools and platforms I use daily, such as Google Workspace and Microsoft Office, which further enhances its versatility and usefulness.
Roger S. – EarthWorks Erosion Services
Thousands of powerful integrations
Powerful growth software for every budget
Free Trial
Join 30,000+ other sales and marketing professionals. Subscribe to our Sell to Win newsletter!
Supporting over 5k companies across 50 countries since 2009