Snapshot 258554
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Learn how Nutshell’s policies & controls keep your data safe. Every day, thousands of businesses trust Nutshell to safely and reliably store important information. Our software is built with care in Ann Arbor, Michigan. Our team of engineers and support specialists work diligently to keep your company's sales and marketing data secure. You can also read more about our approach to security hereOpens in new tab. security@nutshell.com Privacy PolicyOpens in new tab Compliance SOC 2 GDPR Resources View all Third-party audits & reviews 2025 SOC 2 Final Report Penetration Test View 1 more Controls View all Infrastructure security Access control procedures established Remote access encrypted enforced Remote access MFA enforced View 8 more Infrastructure security controls Organizational security Production inventory maintained Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees View 8 more Organizational security controls Product security Data encryption utilized Internal security procedures Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained SOC 2 - System Description View 19 more Internal security procedures controls Data and privacy Data retention procedures established Data classification policy established Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services • Cloud provider USA Provides our hosting and data storage services Google Workspace • Cloud & communication provider USA Enables corporate email access and delivers push notifications to Android devices. Intercom • Customer support USA Enables our email & chat support WebFX • Marketing analytics USA Provides web visitor analytics and form submission routing for connected forms. FAQ View all Updates View all Security PHP2Shell Vulnerability Published October 27, 2026 On October 21, the PHP project disclosed two critical vulnerabilities in the PHP runtime (PHP2Shell, CVE-2026-109618Opens in new tab and CVE-2026-109619Opens in new tab). Nutshell runs on PHP, so we want you to know how we handled it. Protections first: before the patch was public, we applied the mitigations recommended by the PHP security team and edge firewall rules targeting the exploit pattern. Areas that we could not confidently mitigate were blocked from public access. Patched: On Oct 21 at 12:02, we deployed the fixed PHP release across production and verified the running version on every service. No impact found: We have reviewed our systems and found no evidence of exploitation or unauthorized access to customer data. Nothing for you to do. If you have security or compliance questions, contact security@nutshell.com or your Advisor. Our Trust Center at https://trust.nutshell.comOpens in new tab will carry any further updates. Media View all Nutshell in 90 seconds Opens in new tab Learn more about Nutshell's sales, marketing and engagement software platform