Snapshot 66031
Normalized text
Scripts and page chrome removed; this is what change detection compares.
TRUST & SECURITY Enterprise-grade security for every event you run. Zuddl protects attendee, sponsor, and organizer data across every stage of the event lifecycle — from registration and engagement to onsite experiences — backed by independent audits and a continuously monitored security program. Visit the Trust Center Request Audit Reports 5+ Compliance & Attestations SOC 2 II Annual audit AES 256 Encryption at rest TLS 1.2+ Encryption in transit 60m Recovery Time Objective 24/7 Automated monitoring & alerting Independently audited.Continuously validated. Zuddl's security and privacy program is independently audited against leading international standards and aligned with key privacy regulations. All audits listed below are current and cover the Zuddl SaaS platform. SOC 2 Type II Independent CPA audit of Security, Availability, and Confidentiality controls. Request Report ISO/IEC 27001:2022 Information Security Management System (ISMS) certification. Current 2022 revision. View in Trust Center ISO/IEC 27701:2019 Privacy Information Management System (PIMS) extending our ISO 27001 certification. View in Trust Center GDPR Our processing practices are designed to meet GDPR requirements. SCCs in place for international transfers. Review our DPA CCPA / CPRA Aligned with California privacy and consumer data protection requirements. View Privacy Rights CSA CAIQ Lite Completed Cloud Security Alliance self-assessment covering cloud security controls. View in Trust Center Need a specific framework for your review? Contact security@zuddl.com Security built into every layer. Zuddl follows a defense-in-depth approach with controls across infrastructure, application, data, identity, and operations — validated by independent audits. Hardened cloud, segregated environments Hosted on AWS with logically separated environments. Infrastructure regularly patched and monitored. Geographically separated backup and DR setup. AWS with environment segregation Infrastructure regularly patched & monitored Geographically separated backup & DR Secure by design, tested by independents Every code change passes through our SSDLC: code reviews, static analysis and dependency scanning, and annual third-party penetration testing. SSDLC with code reviews Static analysis & dependency scanning Annual third-party penetration testing Encrypted, classified, retained on your terms AES-256 at rest, TLS 1.2+ in transit. Encryption key management via AWS. Data retention aligned to contract; secure deletion on request. AES-256 at rest, TLS 1.2+ in transit Key management via AWS Retention per contract; deletion on request Identity and access, least privilege by default SSO via SAML, MFA support, and role-based access control. Access is granted on least-privilege principles and reviewed on a regular cadence. SSO (SAML) and MFA support Role-based, least-privilege access Periodic access reviews Monitored operations, ready for incidents Continuous monitoring with audit logging across admin activity, plus a documented incident response process, with affected customers notified within 72 hours of a confirmed breach, or sooner where agreed in the customer's contract. 24/7 Continuous automated monitoring and alerting Documented incident response plan Customer notification within 72 hours, or as contractually agreed Built for the realities of live events. Zuddl handles event-specific risks that traditional SaaS platforms don't address — peak traffic, attendee PII, live streaming, onsite check-in, and multi-party data sharing. Registration & attendee data Attendee data processed per customer, segregated per event, with strict access controls. Video & streaming security Live video delivered securely with encryption, origin isolation, and per-attendee authentication controls. Onsite check-in & mobile Check-in data is encrypted in transit and on the device, stored offline only when needed, and synced securely once connectivity is restored. Lead capture & sharing Data sharing controlled by configuration, with role-based access and audit logging. Multi-tenant architecture Customer data logically segregated, with strict access controls ensuring isolation between all tenants. AI governance AI features are customer-controlled, customer data is never used to train AI models, and strict data usage boundaries apply. Responsible AI, with clear boundaries. Zuddl uses AI to power features like the AI Content Hub and Zuddl AI Agents. Customer data is never used to train external models, and our AI features are governed by our AI Governance Policy and AI System Development and Evaluation Policy. Data isolation Customer content stays within Zuddl's processing boundary. No customer data trains external model weights. Governance AI features are governed by documented AI governance and risk management policies aligned with ISO/IEC 42001. AI impact assessments are conducted for our AI features. Controls AI features are opt-in. Customers control enablement at the workspace level. All AI providers bound by DPAs. Read our AI governance disclosures in the Trust Center Your data. Your control. For customer data, Zuddl acts as a data processor on behalf of our customers. We support your obligations under GDPR, CCPA/CPRA, and other privacy frameworks. Our commitments Resources GDPR-aligned data processing across all services Data Processing Agreement (DPA) Standard clauses for secure international transfers Sub-processor list EU data residency available (additional commercial terms apply) Privacy Policy We help customers respond to data subject requests under GDPR (access, rectification, erasure, restriction, portability, objection) and CCPA/CPRA (know, delete, correct, opt out of sale or sharing) Data subject request Transparent sub-processors with advance notice GDPR compliance Enterprise-ready controls. Zuddl gives your security and IT teams the controls they expect from enterprise software. Identity SSO (SAML) MFA support Governance Retention aligned to contract Secure deletion on request Cookie & consent management Visibility Audit logs for admin activity Exportable logs Access Role-based access control Event-level permissions Team-based access Designed for reliability. Live events don't wait for maintenance windows. Our resilience architecture is built for uninterrupted operation and rapid recovery. Zuddl maintains business continuity procedures aligned with ISO 27001. Backups are stored in geographically separated regions. Improved RPO targets available for enterprise deployments. 60 min Recovery Time Objective ≤ 24 hr Recovery Point Objective Daily Daily / Backups, restore-tested regularly Geo Separated DR Regions ISO BC/DR / Plan aligned with ISO 27001 View live status → status.zuddl.com Trust extends to our ecosystem. Sub-processors are reviewed before onboarding. Security and data handling requirements are contractually enforced. Vendors are periodically reassessed. View Full Sub-Processor List Report a vulnerability. Security researchers are a critical part of our program. If you discover a security issue, we want to know. Email security@zuddl.com with: Description of the issue Steps to reproduce Potential impact Your contact information (optional) Everything your review needs. Four paths, one place. Pick the one that fits where you are in your review. Visit theTrust Center Certifications, policies, pentests, sub-processors, questionnaires. View in Trust Center Request AuditReports SOC 2 Type II, ISO 27001:2022, and ISO 27701:2019 under NDA. View in Trust Center HigherSatisfaction Our Data Processing Agreement, ready for your legal team. Download DPA EnhancedEngagement Send your CAIQ, SIG, or custom questionnaire. security@zuddl.com Built for enterprise scale and enterprise security. Zuddl's security program is independently audited under SOC 2 Type II and certified to ISO/IEC 27001 and ISO/IEC 27701. Our privacy practices are designed to support our customers' compliance with GDPR and CCPA/CPRA. Questions about security?Our team is here to help. Visit Trust Center Contact Security Team Ready to build your dream event? Book a Demo