Third Party Index

Snapshot 39200

Document
Security page
URL
https://capsulecrm.com/security/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
static
Size
475395 bytes
SHA-256 (raw)
ba20e677157fd20a7211c6188085af2078320e070f524c9edefb5f02c60656e9
SHA-256 (normalized text)
5fa8deabb2db27d26238f4dd42505132fc30f6b4e061174b670c5a1fca28ee51

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Rated 4.7 on G2
Get early access to Capsule MCP
Join the upcoming product tour
An honest guide to choosing a CRM
Check out our upcoming webinars and events
Get early access to Capsule MCP
Become a PartnerContact Sales
The security of your data and earning your trust is core to our culture, processes and everything we build.
Data Encryption In Transit and At Rest
Capsule supports the latest recommended secure cipher suites and protocols to encrypt data in transit. Customer data is encrypted at rest.
We work hard to maintain best practices for encryption and disable support for older encryption standards that are no longer considered strong. This is one reason that we drop support for older browsers aggressively. Read more about our browser support policy.
Data center security
Capsule and your data is hosted on Amazon Web Services (AWS), a global leader in Infrastructure as a Service (IaaS). Amazon take physical and network security seriously. Their data centres are housed in nondescript facilities. Physical access is strictly controlled both at the perimeter and at building ingress points by professional security staff, video surveillance, intrusion detection systems, and other electronic means. Access to their data centre floors requires two-factor authentication a minimum of two times.
Amazon maintain multiple certifications for its data centers, including ISO 27001 compliance, PCI Certification, and SOC reports. Their reports can be found on the AWS Compliance website and you can read more about the specifics of their approach on the AWS site.
Access control
You choose who to invite to your Capsule account and the permissions they have. Our team do not have access to login to your account. On rare occasions, it may be that we can better assist in investigating a problem you are having with Capsule if we can access some part of your data in readable form. We would always ask your permission before taking this action and the process requires authorization and co-ordination across multiple personal and security layers internally.
Internal controls
Keeping systems safe is part of our daily life here at Capsule. We have strict internal policies and processes to keep our team and their kit safe, to protect our assets, and to limit access to sensitive systems and infrastructure to key staff on a needs-only basis.
Backup and availability
Our systems automatically replicate your data across multiple locations in real-time to maximize availability. Data is also constantly backed up to ensure we can restore access to your data and the service in the unlikely event that the data replicas in all locations fail at once. Our monitoring alerts us to any trouble and we have staff on-call at all times to quickly resolve unexpected incidents.
Updates and external review
We update Capsule most days and because you access Capsule via your browser you're always on the latest version. We monitor security advisories and other security community output closely. We work promptly to upgrade the service to respond to potential new threats and vulnerabilities as they are discovered. We work with certified independent specialists on a regular basis to undertake systems penetration testing and source code reviews.
Payment card data
We maintain PCI-DSS compliance for payment collection. We do not store credit cards on our systems.
Concerns or want to contact us?
For concerns that are urgent or sensitive, please email us on our sensitive support channel [email protected] so that it can be handled promptly by our security team.