Snapshot 254225
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Opens in new tab |Kustomer's Trust Center Kustomer At Kustomer, we believe trust from our customers is paramount. We recognize the importance of providing a top performing application that is continuously available, while protecting your data and keeping it private. Our security consists of layers of protection, starting with team policies and procedures, and incorporates continuous monitoring and automation built into our software development cycle. Our commitment to security extends to our partners and trained third-party security professionals who provide guidance, ensure compliance, and validate security across all areas of the organization. security@kustomer.com Privacy Policy Compliance SOC 2 Type II ISO 27001:2022 ISO 27701 ISO/IEC 42001:2023 GDPR HIPAA CCPA Data Privacy Framework (DPF) Self Certified Resources View all Report a Vulnerability Opens in new tab SOC 2 Type II Report CAIQ v4.1.0 Self Assessment Security Questionnaire ISO 27001:2022 Certificate ISO 27701:2019 Certificate ISO 42001:2023 Certificate Cybersecurity Insurance Network Diagram Kustomer Disaster Recovery Test Report Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 16 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 33 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Subprocessors View all Amazon Web Services • Cloud Hosting Provider for Kustomer Application, SES, and AI Services including Amazon Bedrock, which serves as the AI model inference and data processing layer for Kustomer AI features United States, Ireland, India Cloud hosting and AI model processing locations are determined at time of customer onboarding Anthropic • Engineering United States Claude Desktop and CLI usage MongoDB Atlas • Database United States, Ireland, India Database Hosting Location is decided upon at time of onboarding Coralogix • Cloud monitoring United States, Ireland, India Infrastructure Monitoring FAQ Updates View all General New Subprocessor Notice: ClickHouse, Inc. Published March 9, 2026 Kustomer has added ClickHouse, Inc. as a subprocessor to support reporting and analytics within the Kustomer platform. For more information, see our Subprocessor ListOpens in new tab and Data Protection AddendumOpens in new tab. General CAIQ v4.1.0 Now Available Published February 5, 2026 We’ve updated our Cloud Security Alliance (CSA) Consensus Assessments Initiative Questionnaire (CAIQ) to version 4.1.0 and published it in our Trust Center. This refresh helps ensure our security and privacy responses remain aligned to the latest CSA guidance and provides customers with clearer, up-to-date information for due diligence and risk assessments. CAIQ v4.1.0 was released on January 27, 2026, and our Trust Center now includes the updated questionnaire for review. If you rely on CAIQ mappings as part of your vendor assessment, you can use this version to support internal reviews, procurement, and compliance workflows. General New Security Datasheet & Information Security Policies Published November 18, 2025 To provide greater transparency into how we protect customer data, Kustomer has released an updated Security Datasheet, now available to all visitors through our Trust Center. The datasheet includes: Highlights of in-app security features such as SSO, role-based access controls, IP allow listing, granular permissions and masking, and other controls built directly into the Kustomer app. Highlights of Kustomer’s internal security program including our approach to data protection, secure development, incident management, vendor risk management, business continuity, and compliance. These highlights are intended to give security, privacy, and procurement teams a concise overview of how Kustomer protects customer data across both the product and our internal operations. For organizations that require deeper documentation, we also make Kustomer’s Information Security Policies available under NDA. These policies provide more detailed coverage of topics such as access management, secure development, incident response, vendor management, and data retention and disposal. The Security Datasheet can be downloaded directly from the Kustomer Trust Center. Information Security Policies can be requested through the Trust Center and will be shared under NDA. Compliance New SOC 2 Type II Report Now Available Published November 18, 2025 Kustomer is pleased to announce that our latest SOC 2 Type II report is now available to customers and prospects via our Trust Center under NDA. This independent examination validates the design and operating effectiveness of our controls to safeguard customer data and keep our platform resilient and reliable. As part of our broader compliance program, Kustomer has also successfully completed an independent audit against ISO/IEC 27001:2022, the globally recognized standard for information security management systems. Together, these attestations demonstrate our commitment to maintaining strong security practices, rigorous access controls, and robust monitoring and incident response processes across our environment. If you are a current or prospective customer and would like access to the SOC 2 Type II report and ISO 27001 certificate, please submit a request through the Kustomer Trust Center so we can provide them under NDA.