Snapshot 40736
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Announcements Overview Published on Mar 20, 2025 Welcome to our Trust Portal for Bloomreach services - your gateway to understanding our unwavering commitment to data security, privacy, and compliance. Here, you can access our comprehensive compliance documentation, find answers to frequently asked questions related to security and privacy, and explore our robust security practices. We believe in maintaining transparency and building trust with our customers, and this portal is designed to provide you with the information and assurance you need to feel confident in our ability to protect your data. Security Compliance Documentation of our compliance against global standards including certifications, attestations, and audit reports. Penetration Testing Executive Summaries Subprocessors An updated list of Sub-processors is available at https://www.bloomreach.com/en/legal/subprocessors . Bloomreach shall notify customers of new Sub-processors. Our DPA is also available at https://www.bloomreach.com/en/legal/dpa-all-products which contains provisions related to sub-processing. Subprocessors URL Security Management 18 We create a strong security culture here at Bloomreach, as each and every employee is an essential part of our defense against potential breaches. This culture is present at all stages, including the hiring process, employee on‑boarding, and ongoing training and company events. All new employees are required to agree to our NDA and go through Security Awareness training. This shows our commitment to keeping the data of our customers secure. We ensure all of our endpoint devices are protected according to our Endpoint Security Policy. This includes disc encryption, malware protection, guest access disabled, firewall, and regularly updated operating systems. In addition, we perform regular checks to make sure that we maintain this high level of security. Bloomreach has a vulnerability management policy that includes processes such as regular web scans and scans for potential threats. Once a vulnerability requiring our attention has been identified, it is tracked and assigned for resolution. It is vital for us to properly test all new features before implementing them so that we make sure no unexpected vulnerabilities are introduced to the application. The QA team guarantees that all new additions to our application are bug‑free prior to release. They also test private instances for our fresh clients just before they get into the hands of our Client Services team. Our security monitoring is performed on information collected from internal network traffic and the knowledge of our vulnerabilities. Internal traffic is checked for any suspicious behavior. Network analysis and examination of system logs in order to identify unusual behavior are a vital part of monitoring. We place search alerts on public data repositories to look for security incidents and analyze system logs. To ensure our Security Management is transparent and the details are shared with those who need to see it the most, we also hold a SOC 2 Report. This report can be provided on request under an NDA and gives an overview of Bloomreach’s technical and organizational security measures. Additional details Our internal security teams, along with the DPO are dedicated to safeguard your data so you can focus your time and resources towards managing your business. With Bloomreach, you can be assured that you have a partner who will help you serve more customers, achieve business outcomes, and scale quickly, all while having the peace of mind that your data is safe and secure. Privacy details Transparency is a core value of Bloomreach and we strive to be very clear about what information we collect and how you can control it. Please see the following documents reflecting the policies of our services and this website. The privacy of individuals whose personal information we process, whether on behalf of others (like our customers and their end users) or within Bloomreach is extremely important to us. Privacy URL