YOUR DATA IS SAFE WITH us

Security & Privacy

Prodsight is built on a foundation of proven and secure technologies. Our customers entrust us with their information every day and we take their security seriously.

Data Privacy

We are GDPR compliant and take the security and privacy of your data seriously

GDPR Compliant

Prodsight maintains compliance with the EU’s General Data Protection Regulation and maintains product features, corporate protocols, and legal documents to help our users and customers comply.

Data Minimization

Prodsight minimises the use of personally identifiable information (PII) by customer names, email addresses or phone numbers from being imported into our systems.

Confidentiality

All employee and contractor agreements include confidentiality clauses. Access to customer data is limited to authorized employees who require it for their job.

Restricted Access

Your data is only accessed with permission or in the event of a security or a QA issue.

Data Sub-processors

We carefully vet all of our data subprocessors to ensure data privacy and confidentiality.

Data is never sold

We will never sell any of our client data to third parties.

Product & Infrastructure Security

Prodsight is built on a foundation of proven and secure technologies

Secure Infrastructure

We only use AWS and GCP infrastructure that meets the highest security standards. Our data centre providers maintain ISO 27001, SOC2 Type II, and many other certifications.

Virtual Private Cloud

All of our servers are within our own virtual private cloud (VPC) that prevent unauthorized requests.

Backups

Prodsight conducts comprehensive daily backups, in addition to incremental snapshots to avoid data loss.

Uptime

We have an uptime of 99% or higher and have monitoring and alerts in place to automatically inform us of any incidents or downtime.

Access Control

Control which users can manage, view, and edit data within your Prodsight workspace.

Single-Sign On

SAML Single Sign-on (SSO) allows users to authenticate into Prodsight with their Google G-Suite accounts without needing to create a password.

Password Security

Prodsight enforces a password complexity standard and credentials are stored using a PBKDF2 function (bcrypt).

PCI Compliant

All payments made to Prodsight go through our partner, Stripe which is fully PCI compliant.

SOC2 Certification

Prodsight is in the process of obtaining a SOC2 certification

2021 Q2

Gap Analysis

Performed a gap analysis of Prodsight’s security and IT infrastructure in preparation for a SOC 2 audit

2021 Q3

Appoint auditor

We have engaged an independent CPA-licences audit firm to assess and report on our security controls.

2021 Q3

Review

We are reviewing all of our policies and processes and aligning them with SOC2 principles.

2021 Q4

SOC2 Audit

An accredited auditor will assess our security controls and issue a SOC2 report detailing our compliance.

Want to learn about our progress towards SOC 2?

Request SOC2 Gap Assessment Report

Security questions?

If you think you may have found a security vulnerability, please get in touch with our security team at [email protected].

Learn more about Prodsight by reading our Terms of Service, Privacy Policy and Cookie Policy