Snapshot 233311
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review Overview At ChurnZero, we know that your trust depends on how well we protect your data. That’s why security, privacy, and compliance are woven into every aspect of our business—from how we build our platform to how we support our customers. This Trust Center is your single source for information about our security posture, compliance certifications, and data protection practices. Here, you can explore our policies, review audit reports, and request access to detailed security documentation. Our goal is simple: to give you confidence that your data is handled with the highest standards of care, transparency, and integrity. Compliance ISO/IEC 27001 SOC 2 Type 2 HIPAA GDPR CISA: Secure-by-Design Pledge Privacy Shield ChurnZero is reviewed and trusted by HackerRank Sibme FreeWill Untappd Cision iContact MyShopManager Boulevard Critical Mention ABBYY Cin7 Smoothwall Cofense GoCanvas FiscalNote Woven IntelAgree Trust Center Updates Node.js October 2026 security releases Vulnerabilities On October 21, 2026, the Node.js project published security releases addressing several vulnerabilities, including CVE-2026-105482 and others rated high severity. We reviewed the advisory and confirmed the ChurnZero production environment and customer platform are not affected. No customer data was at risk and no customer action is required. We are patching corporate workstations as a precaution. Full advisory: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases Questions can be directed to support@churnzero.com. PHP remote code execution vulnerabilities (CVE-2026-109618, CVE-2026-109619) Vulnerabilities ChurnZero is not affected by CVE-2026-109618 or CVE-2026-109619, the critical PHP vulnerabilities announced by the PHP Foundation on October 20, 2026 and patched on October 21. The ChurnZero platform is not built on PHP, and no PHP runtime is deployed in our production environment. The vulnerable code does not exist in our stack, so there is nothing to patch and no customer data was exposed. No action is required from customers. Questions can go to support@churnzero.com. Updated Terms of Service, DPA, and Privacy Policy General We've updated our Terms of Service, Data Processing Addendum, and Privacy Policy, effective 10/1/2026 Protecting our customers' data is central to how we build and run ChurnZero. We review these documents regularly so they stay accurate as our platform, our sub-processors, and the regulatory environment change, and so you always have a clear picture of how your data is handled. The current versions are available on our website at https://churnzero.com/legal and in the Trust Center https://trust.churnzero.com Documents REPORTSChurnZero KIT AI FAQ REPORTSChurnZero AI FAQ REPORTSAWS Network Diagrams REPORTSPentest Customer Letter REPORTSSOC 2 Report REPORTSData Flow Diagram (DFD) REPORTSHIPAA Report REPORTSChurnZero AI DPIA REPORTSChurnZero DPIA POLICIESChange Management Policy POLICIESData Classification Policy POLICIESBusiness Continuity/Disaster Recovery (BC/DR) Policy Reports ChurnZero KIT AI FAQ AWS Network Diagrams ChurnZero AI DPIA View more Security Grades SecurityScorecard ChurnZero Qualys SSL Labs ChurnZero Application A+ UpGuard ChurnZero Application A Policies Acceptable Use Policy Access Control Policy Asset Management Policy View more Risk Profile Data Access LevelRestricted Impact LevelModerate Recovery Time Objective24 hours View more Product Security Audit Logging Data Security Integrations View more Self-Assessments CAIQ Data Security Access Monitoring Certificates of Destruction Data Asset Classification View more App Security Application Penetration Testing Code Analysis Secure Development Training View more ESG Anti-Bribery and Corruption Code of Ethics Diversity, Equity, and Inclusion View more Legal Subprocessors Cyber Insurance Data Processing Agreement View more Data Privacy Cookies Data Breach Notifications Data Into System View more Access Control Access Log Management Data Access Device Lock View more Infrastructure Status Monitoring Amazon Web Services Capacity Planning & Management View more Endpoint Security Anti-Malware Disk Encryption Host Intrusion Detection System (HIDS) View more Network Security Data Loss Prevention Distributed Denial of Service Protection (Anti-DDoS) Firewall View more Corporate Security Email Protection Employee Handbook Employee Training View more Incident Response Forensic Retainer Incident Reporting Process Pager Service Risk Management Data Access/Impact Levels Risk Assessments Third-Party Dependence Asset Management Asset Classification Asset Inventories (Hardware/Software) Asset Tracking View more BC/DR Alternate Processing/Storage Site Business Continuity Plan (BCP) Contingency Plan Testing/Lessons Learned View more Training Employee Privacy Training Phishing Training Secure Development Training View more Change Management Change Management Program Change Restrictions Configuration Management Program View more Continuous Monitoring Automated Alert Response Automated Compliance Monitoring Data Loss Prevention System (DLP) View more Subprocessors