Third Party Index

Snapshot 68768

Document
Security page
URL
https://www.contactmonkey.com/security
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
527105 bytes
SHA-256 (raw)
64d13c5d45cbc3ad5dbaa99eae1367b7c71b662b32e4e46bfd81d07e376f0981
SHA-256 (normalized text)
f9521ba5e6ce508e3625030c84876a16fb0472d35e51c3ac4222badaadef5ba7

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Your data is in safe hands with ContactMonkey
Your security comes first in everything we build. With advanced infrastructure, automation, and constant monitoring, your data is always protected.
Contact us Visit our Trust Center
Certified from the start
Visit our Trust Center
SOC 2 Type 2 certified
Our completion of the AICPA SOC 2 Type 2 audit affirms that our security practices, policies, and operations meet the highest industry standards.
GDPR compliant
ContactMonkey complies with GDPR and allows data erasure requests under our GDPR Erasure Policy. Our Data Processing Addendum is available to all customers.
Secure single sign-on
Available on our Enterprise plans, ContactMonkey integrates with SAML 2.0 providers (by request) for single sign-on.
End-to-end security you can trust
Enjoy fast and reliable enterprise-grade security for your internal communications.
Data security
Automated backups: ContactMonkey’s databases are regularly backed up to protect customer data and ensure it’s easily recoverable in case of disruptions.
Data encryption: All data is encrypted at rest using AES-256 and in transit using TLS v1.2 to protect your information from unauthorized access.
Multi-region strategy: Have your data close to home. Our application is available in the USA, Western Europe, Australia and Asia Pacific, and Canada.
Environment security
Cloud leverage: We use Amazon Web Services (AWS) for cloud infrastructure hosting and services.
Continuous monitoring: Our platform is continuously monitored by experts to ensure safety.
Vetted vendors: All third-party vendors are evaluated for SOC 2 compliance and best practices.
Proactive alerts: Our engineering team swiftly addresses newly detected vulnerabilities.
Access control: Production environment access is tightly controlled with least privilege standards.
External security assessment
Third-party testing: Annual independent penetration testing ensures robust security.
SOC 2 verification: Annual SOC 2 audits by independent auditors validate our adherence to top security standards.
Secure software delivery
Secure development & integration: All projects follow secure development principles and undergo review to ensure protection from the start.
Manual & automated testing: All system changes undergo thorough automated and manual testing before production deployment.
Peer-reviewed code: All system changes are peer-reviewed and tested by our engineers to guarantee secure delivery to production.
Security-ready team
Annual security training: Mandatory employee security training ensures all staff are vigilant and prepared.
Rigorous screening: All employees and contractors undergo background checks as per local laws and industry standards.
Confidentiality: Signed agreements uphold the protection of sensitive information.
Security & risk management team: Our multi-department Security & Risk Management team oversees company-wide security.
“Before Contact Monkey, we had nothing. We had no benchmark. We had no idea what messaging was getting to our employees, how they were best receiving it. We had very limited two-way feedback loops.”
Jerilyn Hall
Employee Communications Manager
Read the story
40–50%
of deskless workforce now reached
Watch video
“[ContactMonkey] really does allow our teams to be creative, but also provides the analytics to make sure we’re doing the right things.”
Jeremy Roberts
Sr. Manager of Communications, Go-To-Market & Incentives
Read the story
40%
read rate boost
15%
higher open rates
Watch video
“ContactMonkey’s Dynamic Content tool saves me hours. I no longer need to copy, paste, or duplicate emails. It saves time, brain space, and prevents duplication errors.”
Emily-Rose Carr
Internal Communications Specialist
Read the story
~60%
open rates
~19%
click rates
Watch video
With dynamic content, I can build one email with multiple blocks, with each block tailored to a group. I’m not duplicating emails or copy/pasting. It saves time and reduces mistakes.
James Maiden
Sr. Manager of Communications, Go-To-Market & Incentives
Read the story
5x
faster email creation
Watch video
“Data helps drive informed decision-making. With appropriate feedback, we’re now able to analyze and change our strategy.”
Lindsey Champagne
Director of Communications and PR
Read the story
13%
average click rate
“Our team’s efficiency was slowed down by the lack of sophistication of our previous tool. And we knew employees weren’t getting the information—they were flagging it as phishing.”
Tamara Palmer
Employee Engagement & Internal Communications Lead
Read the story
Security FAQs
How do I remove my ContactMonkey data?
Taking control of your ContactMonkey data is easy. Simply send us a message at support@contactmonkey.com with clear instructions on what you want deleted. We’ll swiftly process your request and get back to you within 30 days.
Learn more
How does tracking work?
Your team can make data-driven decisions with confidence by using ContactMonkey’s dashboard, which provides powerful analytics from open rates and link clicks to read times, locations, and more.
Learn more
Is my data secure?
You bet. Your data’s under lock and key! With ContactMonkey, your info is strictly for analytics in internal comms. We store sender/recipient email addresses, subject lines, and optional email bodies upon sending. Once opened, we track recipient IPs and device user agents. Plus, we’ve got AES 256 encryption at rest and TLS 1.2 in transit for added security.
Learn more
Are my email messages stored?
With ContactMonkey’s email builder, users can create responsive HTML templates and emails right from our SaaS platform. Once created, they’re saved as JSON and HTML in our database, giving users easy access to view and modify them whenever they want. You’ve got the power to delete them entirely, wiping them from our database. Plus, emails made and sent via rich text? They don’t linger on our servers, providing extra peace of mind.
Learn more
How do I report a possible vulnerability?
Are you a security researcher? Do you think you have found a vulnerability in the ContactMonkey system? We are happy to connect with you via security@contactmonkey.com. Please be aware that at this time that ContactMonkey is not operating a bug bounty program.
Learn more
Got security questions?
Fill out this form, and we’ll get back to you soon. Or, email us directly at security@contactmonkey.com.
Top-voted internal comms software on
G2
Top-voted internal comms software on
G2
Why ContactMonkey? Engage your inbox. ContactMonkey powers measurable employee engagement worldwide. Enjoy internal comms software with better reach, delightful design, and fewer errors.
4.6
on Microsoft AppSource
4.4
on G2
Features
Product Overview
Journeys Coming soon
AI Email Builder
Approval Workflows New
ConfidenceCheck
Email Template Builder
Outlook Integration
Dynamic Content
Audience Segmentation
Multi-Language Emails
Send Bulk Email
Integrations
Solutions
Solutions Overview
Enterprise Communications
Employee Email
Employee Engagement
Employee Newsletter
Employee Surveys
Analytics and Reporting
SMS Communications
Industries
Healthcare
Food and Beverage
Insurance
Utilities
Finance
Higher Education
Manufacturing
Why us
Why Switch
Why ContactMonkey
Compare
vs Poppulo
vs Workshop
vs Staffbase
vs ChangeEngine
vs PoliteMail
Resources
All Resources
Blog
Buying Guide 2026
Benchmarks
Customer Stories
Ebooks
Email Templates
Webinars & Events
Product Updates
AI Prompt Library
Partnerships
Build Your Business Case
Company
About Us
Careers Hiring
News
Contact Us
Policies
Security
AI Policy
Accessibility