Snapshot 234153
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Duda | Trust Center Welcome to our Trust Center — a centralized hub for showcasing our commitment to security, privacy, and compliance. Here, you’ll find transparent and up-to-date information about our security practices, compliance certifications, and data protection policies. Compliance Compliance SOC 2 Type II ISO 27001:2022 Controls Controls Product Security | (7 Controls) Secure Software Development Lifecycle established Penetration Testing conducted Change Management procedures enforced Vulnerability scanning procedures established Access Management | (8 Controls) Role Based Access Control (RBAC) established Multi Factor Authentication implemented User Access Reviews conducted Password policy enforced Security and Continuity Procedures | (6 Controls) Business Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Data backups and restoration procedures tested Production multi-availability zones utilized Data Security | (4 Controls) Encryption at rest implemented Encryption in transit implemented Encryption key management process established Network and firewall access restricted Organization Security | (5 Controls) Vendor Risk Management established Asset Management maintained Security Awareness Training implemented Defined roles and responsibilities established Endpoint Security | (4 Controls) Endpoint Detection and Response established Disk encryption enforced Threat and Malware protection enforced Endpoint Management policies established Reports and Documents Reports and Documents Duda SOC 2 Type II Final Report (2026) Duda Penetration-Test Final Report (2025) Duda Cloud Network Diagram (June 2026) Duda Penetration-Test Activity Approval (2026) Policies Policies Code of Conduct 09 Duda - Secure Development LifeCycle Framework 08 Duda - Acceptable Use Policy 15 Duda - Change Management and Segregation of Duties Policy FAQ FAQ What security certifications and testing does Duda have? Duda is certified to ISO/IEC 27001:2022 and has completed a SOC 2 Type II examination covering Security, Availability and Confidentiality. Duda also commissions independent application penetration testing at least once a year. Selected certificates and assurance materials are available through the Trust Center, while detailed reports may require additional approval and confidentiality protections. How does Duda keep customer sites and data separate? Duda is a multi-tenant platform, so customers share the underlying infrastructure but not access to each other’s sites or data. Duda uses account and site identifiers, permission checks, encryption and restricted production access to keep customer environments logically separated. Subprocessors Subprocessors Ada - AI-powered customer service automation platform for chat and messaging. Location US Amazon Web Services - Cloud computing platform providing infrastructure, storage, AI, and developer services. Location EU | US Anthropic - Large Language Model Location US Atlassian - Project Management and Collaboration Location EU Braintrust Data, Inc. - AI Observability Platform Location US Cal.com - Open-source scheduling platform for booking meetings and appointments. Location US